D-Link DIR-825/AC User manual

User Manual
DIR-825/AC
Wireless AC1200 Dual Band Gigabit Router with
3G/CDMA/LTE Support and USB Port
April 2015
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
User Manual
Contents
Chapter 1. Introduction..........................................5
Contents and Audience.......................................................5
Conventions.................................................................5
Document Structure..........................................................5
Chapter 2. Overview..............................................6
General Information.........................................................6
Specifications..............................................................7
Product Appearance.........................................................13
Top and Front Panels.....................................................13
Back Panel...............................................................15
Delivery Package...........................................................16
Chapter 3. Installation and Connection..........................17
Before You Begin...........................................................17
Connecting to PC...........................................................19
PC with Ethernet Adapter.................................................19
Obtaining IP Address Automatically in OS Windows XP......................19
Obtaining IP Address Automatically in OS Windows 7.......................22
PC with Wi-Fi Adapter....................................................27
Configuring Wi-Fi Adapter in OS Windows XP...............................28
Configuring Wi-Fi Adapter in OS Windows 7................................29
Connecting to Web-based Interface..........................................31
Web-based Interface Structure..............................................33
General Information Page.................................................33
Menu Sections............................................................34
Notifications and System Drop-down Menu..................................36
Chapter 4. Configuring via Web-based Interface..................39
Monitoring.................................................................39
Click'n'Connect............................................................43
Creating WAN Connection..................................................46
PPPoE Connection.......................................................46
IPv6 PPPoE or PPPoE Dual Stack Connection..............................47
Static IP Connection...................................................48
Dynamic IP Connection..................................................49
Static IPv6 Connection.................................................50
Dynamic IPv6 Connection................................................51
PPPoE + Static IP Connection...........................................52
PPPoE + Dynamic IP Connection..........................................55
PPTP + Static IP or L2TP + Static IP Connection........................57
PPTP + Dynamic IP or L2TP + Dynamic IP Connection......................60
3G Connection..........................................................62
LTE Connection.........................................................63
Checking Internet Availability...........................................64
Configuring Yandex.DNS Service...........................................65
Configuring Wireless Connection..........................................66
Configuring IPTV.........................................................69
Wireless Network Settings Wizard...........................................70
Access Point Mode........................................................71
Client Mode..............................................................73
Virtual Server Settings Wizard.............................................76
IPTV Settings Wizard.......................................................78
Page 2 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
User Manual
Status.....................................................................79
Network Statistics.......................................................79
DHCP.....................................................................80
Routing Table............................................................81
Clients..................................................................82
Active Sessions..........................................................83
Multicast groups.........................................................84
Net........................................................................85
WAN......................................................................85
Creating PPPoE WAN Connection..........................................86
Creating IPv6 PPPoE or PPPoE Dual Stack WAN Connection.................90
Creating Static IP or Dynamic IP WAN Connection........................96
Creating Static IPv6 or Dynamic IPv6 WAN Connection...................101
Creating PPPoE + Static IP or PPPoE + Dynamic IP WAN Connection.......105
Creating PPTP/L2TP + Static IP or PPTP/L2TP + Dynamic IP WAN Connection
......................................................................112
Creating 3G WAN Connection............................................119
Creating LTE WAN Connection...........................................122
LAN.....................................................................125
Wi-Fi.....................................................................129
Basic Settings..........................................................129
2.4GHz Band...........................................................129
5GHz Band.............................................................130
Security Settings.......................................................132
MAC Filter..............................................................138
List of Wi-Fi Clients...................................................140
WPS.....................................................................141
Using WPS Function via Web-based Interface............................143
Using WPS Function without Web-based Interface........................143
Additional Settings.....................................................145
WMM.....................................................................147
Client..................................................................149
Advanced..................................................................152
VLAN....................................................................153
UPnP IGD................................................................156
Redirect................................................................157
DDNS....................................................................158
Routing.................................................................159
IPv6 Routing............................................................161
Remote Access to Device.................................................163
Miscellaneous...........................................................165
TR-069 Client...........................................................167
Flow Control............................................................169
IPsec...................................................................170
Firewall..................................................................172
IP Filters..............................................................172
Virtual Servers.........................................................175
DMZ.....................................................................178
MAC Filter..............................................................179
3G/LTE Modem..............................................................181
Information.............................................................182
PIN.....................................................................183
Page 3 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
User Manual
USB Storage...............................................................185
Information.............................................................185
Filebrowser.............................................................186
Print Server............................................................187
Samba...................................................................188
FTP.....................................................................189
DLNA....................................................................190
Transmission..............................................................192
Transmission Settings...................................................192
Control...................................................................195
URL Filter..............................................................195
Yandex.DNS................................................................197
Internet Protection Settings............................................197
System....................................................................200
Administrator Password..................................................201
Configuration...........................................................202
System Log..............................................................204
Firmware Upgrade........................................................206
Local Update..........................................................207
Remote Update.........................................................208
System Time.............................................................209
Ping....................................................................210
Traceroute..............................................................211
Telnet..................................................................212
Users USB...............................................................213
Chapter 5. Operation Guidelines................................215
Safety Instructions.......................................................215
Wireless Installation Considerations......................................216
Connecting to Cable or DSL Modem..........................................217
Chapter 6. Abbreviations and Acronyms..........................218
Page 4 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Introduction
User Manual
CHAPTER 1.
INTRODUCTION
Contents and Audience
This manual describes the router DIR-825/AC and explains how to configure and operate it.
This manual is intended for users familiar with basic networking concepts, who create an in-home
local area network, and system administrators, who install and configure networks in offices.
Conventions
Example
!
Description
text
The body text of the manual.
Before You Begin
A reference to a chapter or section of this manual.
“Quick
Guide”
A reference to a document.
Installation
Change
A name of a menu, menu item, control (field, checkbox, drop-down
list, button, etc.).
192.168.0.1
Data that you should enter in the specified field.
Information
An important note.
Document Structure
Chapter 1 describes the purpose and structure of the document.
Chapter 2 gives an overview of the router's hardware and software features, describes its
appearance and the package contents.
Chapter 3 explains how to install the router DIR-825/AC and configure a PC in order to access its
web-based interface.
Chapter 4 describes all pages of the web-based interface in detail.
Chapter 5 includes safety instructions and tips for networking and connecting additional equipment.
Chapter 6 introduces abbreviations and acronyms used in this manual.
Page 5 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Overview
User Manual
CHAPTER 2.
OVERVIEW
General Information
The DIR-825/AC device is a wireless dual band router supporting LTE, 3G GSM and CDMA with
Gigabit Ethernet ports. It provides a fast and simple way to create a wireless and wired network at
home or in an office.
The router is equipped with a USB port for connecting a USB modem 1, which can be used to
establish connection to the Internet. In addition, to the USB port of the router you can connect a
USB storage device, which will be used as a network drive, or a printer.
Also you are able to connect the wireless router DIR-825/AC to a cable or DSL modem or to a
private Ethernet line and use a high-speed Internet connection to successfully fulfill a wide range of
professional tasks. The built-in 4-port switch enables you to connect Ethernet-enabled computers,
game consoles, and other devices to your network.
Using the DIR-825/AC device, you are able to quickly create a high-speed wireless network at
home or in your office, which lets computers and mobile devices access the Internet virtually
anywhere (within the operational range of your wireless network). Simultaneous activity of 2.4GHz
band and 5GHz band allows performing a wide range of tasks. The router can operate as a base
station for connecting wireless devices of the standards 802.11a, 802.11b, 802.11g, 802.11n, and
802.11ac (at the wireless connection rate up to 1167Mbps2).
The router supports multiple functions for the wireless interface: several security standards (WEP,
WPA/WPA2), MAC address filtering, WPS, WMM.
In addition, the device is equipped with a button for switching the Wi-Fi network off/on. If needed,
for example, when you leave home, you can easily switch the router’s WLAN by pressing the
button, and devices connected to the LAN ports of the router will stay online.
The wireless router DIR-825/AC includes a built-in firewall. The advanced security functions
minimize threats of hacker attacks, prevent unwanted intrusions to your network, and block access
to unwanted websites for users of your LAN.
You can configure the settings of the wireless router DIR-825/AC via the user-friendly web-based
interface (the interface is available in several languages).
Now you can simply update the firmware: the router itself finds approved firmware on D-Link
update server and notifies when ready to install it.
1 Not included in the delivery package. D-Link does not guarantee compatibility with all USB modems. For the list of
supported USB modems, see the Specifications* section, page 7.
2 Up to 300Mbps for 2.4GHz and up to 867Mbps for 5GHz.
Page 6 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Overview
User Manual
Specifications*
Hardware
·
10/100/1000BASE-T WAN port
·
4 10/100/1000BASE-T LAN ports
·
USB 2.0 port
·
POWER
·
STATUS
·
WAN
·
4 LAN LEDs
·
WLAN
·
ON/OFF button to power on/power off
·
RESET button to restore factory default settings
·
WPS button to set up secure wireless connection and enable/disable wireless
network
Antenna
·
Two external non-detachable antennas (2dBi gain for 2.4GHz and 3dBi gain for
5GHz)
MIMO
·
2x2
Power connector
·
Power input connector (DC)
·
LTE
·
3G
·
PPPoE
·
IPv6 PPPoE
·
PPPoE Dual Stack
·
Static IP / Dynamic IP
·
Static IPv6 / Dynamic IPv6
·
PPPoE + Static IP
·
PPPoE + Dynamic IP
·
PPTP/L2TP + Static IP
·
PPTP/L2TP + Dynamic IP
·
Support of IEEE 802.1X for Internet connection
·
DHCP server/relay
·
DHCPv6 server (Stateful/Stateless), IPv6 prefix delegation
·
DNS relay
·
Support of DNSv6 AAAA records
·
Dynamic DNS
·
Static IP routing
·
Static IPv6 routing
·
IGMP Proxy
·
RIP
·
Support of UPnP IGD
·
Support of VLAN
·
Flow control
·
WAN ping respond
·
Support of SIP
·
Support of RTSP
Interfaces
LEDs
Buttons
Software
WAN connection types
Network functions
* The device features are subject to change without notice. For the latest versions of the firmware and relevant
documentation, visit www.dlink.ru.
Page 7 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Overview
User Manual
Firewall functions
VPN
USB interface functions
·
Network Address Translation (NAT)
·
Stateful Packet Inspection (SPI)
·
IP filters
·
IPv6 filters
·
MAC filter
·
URL filter
·
DMZ
·
Prevention of ARP and DDoS attacks
·
Virtual servers
·
Built-in Yandex.DNS web content filtering service
·
IPSec/PPTP/L2TP/PPPoE pass-through
·
IPSec tunnels
·
USB modem
Auto connection to available type of supported network (4G/3G/2G) 3
Enabling/disabling PIN code check, changing PIN code4
USB storage
File browser
Print server
Access to storage via accounts
Built-in Samba server
Built-in FTP server
Built-in DLNA server
Built-in Transmission torrent client; uploading/downloading files from/to USB
storage
·
Management
·
Local and remote access to settings through TELNET/WEB (HTTP/HTTPS)
·
Multilingual web-based interface for configuration and management
·
Notification on connection problems and auto redirect to settings
·
Firmware update via web-based interface
·
Automatic notification on new firmware version
·
Saving/restoring configuration to/from file
·
Support of remote logging
·
·
Automatic synchronization of system time with NTP server and manual
time/date setup
Ping function
·
Traceroute utility
·
TR-069 client
·
IEEE 802.11a/n/ac
·
IEEE 802.11b/g/n
·
2400 ~ 2483.5MHz
·
5150 ~ 5350MHz
·
WEP
·
WPA/WPA2 (Personal/Enterprise)
·
МАС filter
·
WPS (PBC/PIN)
·
Support of client mode
·
WMM (Wi-Fi QoS)
·
Managing connected stations
·
Advanced settings
·
IEEE 802.11a: 6, 9, 12, 18, 24, 36, 48, and 54Mbps
Wireless Module Parameters
Standards
Frequency range
Wireless connection security
Advanced functions
Wireless connection rate
3
4
For LTE and GSM USB modems.
For GSM USB modems only.
Page 8 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Overview
User Manual
·
IEEE 802.11b: 1, 2, 5.5, and 11Mbps
·
IEEE 802.11g: 6, 9, 12, 18, 24, 36, 48, and 54Mbps
·
IEEE 802.11n (2.4GHz/5GHz): from 6.5 to 300Mbps (from MCS0 to MCS15)
·
IEEE 802.11ac (5GHz): from 6.5 to 867Mbps (from MCS0 to MSC9)
Transmitter output power
·
The maximum value of the transmitter
output power depends upon the radio
frequency regulations applied in your
country
802.11a (typical at room temperature 25 °C)
16dBm at 6, 9, 12, 18, 24Mbps
15dBm at 36, 48Mbps
14dBm at 54Mbps
·
802.11b (typical at room temperature 25 °C)
17dBm at 1, 2, 5.5, 11Mbps
·
802.11g (typical at room temperature 25 °C)
18dBm at 6, 9, 12Mbps
17dBm at 18, 24Mbps
16dBm at 36, 48Mbps
15dBm at 54Mbps
·
802.11n (typical at room temperature 25 °C)
2.4GHz, HT20
18dBm at MCS0/1/2/8/9/10
16dBm at MCS3/4/11/12
15dBm at MCS5/6/13/14
14dBm at MCS7/15
2.4GHz, HT40
18dBm at MCS0/1/2/8/9/10
16dBm at MCS3//4/11/12
15dBm at MCS5/6/13/14
14dBm at MCS7/15
5GHz, HT20
17dBm at MCS0/1/2/3/8/9/10/11
16dBm at MCS4/12
15dBm at MCS5/13
14dBm at MCS6/14
13dBm at MCS7/15
5GHz, HT40
17dBm at MCS0/1/2/3/8/9/10/11
16dBm at MCS4/12
15dBm at MCS5/13
14dBm at MCS6/14
13dBm at MCS7/15
·
802.11ac (typical at room temperature 25 °C)
VHT20
17dBm at MCS0/1/2/3
16dBm at MCS4
15dBm at MCS5
14dBm at MCS6
13dBm at MCS7
VHT40
17dBm at MCS0/1/2/3
16dBm at MCS4
15dBm at MCS5
14dBm at MCS6
13dBm at MCS7
VHT80
17dBm at MCS0/1
16dBm at MCS2
15dBm at MCS3
14dBm at MCS4/5
13dBm at MCS6
12dBm at MCS7
11dBm at MCS8/9
Page 9 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Overview
User Manual
Receiver sensitivity
·
802.11a (typical at PER = 10% (1000-byte PDUs) at room temperature 25 °C)
-85dBm at 6Mbps
-84dBm at 9Mbps
-82dBm at 12Mbps
-80dBm at 18Mbps
-77dBm at 24Mbps
-73dBm at 36Mbps
-69dBm at 48Mbps
-68dBm at 54Mbps
·
802.11b (typical at PER = 8% (1000-byte PDUs) at room temperature 25 °C)
-83dBm at 1Mbps
-80dBm at 2Mbps
-79dBm at 5.5Mbps
-76dBm at 11Mbps
·
802.11g (typical at PER = 10% (1000-byte PDUs) at room temperature 25 °C)
-82dBm at 6Mbps
-81dBm at 9Mbps
-79dBm at 12Mbps
-77dBm at 18Mbps
-74dBm at 24Mbps
-70dBm at 36Mbps
-66dBm at 48Mbps
-65dBm at 54Mbps
·
802.11n (typical at PER = 10% (1000-byte PDUs))
HT20
-82dBm at MCS0/8
-79dBm at MCS1/9
-77dBm at MCS2/10
-74dBm at MCS3/11
-70dBm at MCS4/12
-66dBm at MCS5/13
-65dBm at MCS6/14
-64dBm at MCS7/15
HT40
-79dBm at MCS0/8
-76dBm at MCS1/9
-74dBm at MCS2/10
-71dBm at MCS3/11
-67dBm at MCS4/12
-63dBm at MCS5/13
-62dBm at MCS6/14
-61dBm at MCS7/15
·
802.11ac (typical at PER = 10% (1000-byte PDUs))
HT20
-82dBm at MCS0
-79dBm at MCS1
-77dBm at MCS2
-74dBm at MCS3
-70dBm at MCS4
-66dBm at MCS5
-65dBm at MCS6
-64dBm at MCS7
-59dBm at MCS8
-57dBm at MCS9
HT40
-79dBm at MCS0
-76dBm at MCS1
-74dBm at MCS2
-71dBm at MCS3
-67dBm at MCS4
-63dBm at MCS5
Page 10 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
User Manual
-62dBm at MCS6
-61dBm at MCS7
-56dBm at MCS8
-54dBm at MCS9
HT80
-76dBm at MCS0
-73dBm at MCS1
-71dBm at MCS2
-68dBm at MCS3
-64dBm at MCS4
-60dBm at MCS5
-59dBm at MCS6
-58dBm at MCS7
-53dBm at MCS8
-51dBm at MCS9
·
802.11a: BPSK, QPSK, 16QAM, 64QAM with OFDM
·
802.11b: DQPSK, DBPSK, DSSS, CCK
·
802.11g: BPSK, QPSK, 16QAM, 64QAM with OFDM
·
802.11n: BPSK, QPSK, 16QAM, 64QAM with OFDM
·
802.11ac: BPSK, QPSK, 16QAM, 64QAM, 256QAM with OFDM
Dimensions
·
195 x 155 x 35 mm (7.7 x 6.1 x 1.4 in)
Weight
·
250 g (0.55 lb)
Power
·
Output: 12V DC, 1.5A
Temperature
·
Operating: from 0 to 40 °C
·
Storage: from -20 to 65 °C
·
Operating: from 10% to 90% (non-condensing)
·
Storage: from 5% to 95% (non-condensing)
·
Alcatel X500
·
D-Link DWM-152C1
·
D-Link DWM-156A6
·
D-Link DWM-156A7
·
D-Link DWM-156C1
·
D-Link DWM-157B1
·
D-Link DWM-157B1 (Velcom)
·
D-Link DWM-158D1
·
Huawei E150
·
Huawei E1550
·
Huawei E156G
·
Huawei E160G
·
Huawei E169G
·
Huawei E171
·
Huawei E173 (Megafon)
·
Huawei E220
·
Huawei E352 (Megafon)
·
Huawei E367 (3G mode)
Modulation schemes
Physical Parameters
Operating Environment
Humidity
Supported USB modems5
GSM
5
The manufacturer does not guarantee proper operation of the router with every modification of the firmware of USB modems.
Page 11 of 220
Overview
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
User Manual
Supported USB modems
CDMA
LTE
·
Huawei E392 (3G mode)
·
ZTE MF112
·
ZTE MF192
·
ZTE MF626
·
ZTE MF627
·
ZTE MF652
·
ZTE MF667
·
ZTE MF668
·
ZTE MF752
·
Airplus MCD-650
·
Airplus MCD-800
·
AnyDATA ADU-300A
·
AnyDATA ADU-500A
·
AnyDATA ADU-510A
·
Huawei EC306
·
ZTE AC5710
·
ZTE AC5730
·
Huawei E3131
·
Huawei E3272
·
Huawei E367
·
Huawei E392
·
Megafon M100-1
·
Megafon M100-3
·
Megafon M100-4
·
Megafon M150-1
·
MTS 824F
·
Yota LU-150
·
Yota WLTUBA-107
·
ZTE MF823
·
ZTE MF827
Page 12 of 220
Overview
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Overview
User Manual
Product Appearance
Top and Front Panels
Figure 1. Top panel view.
LED
POWER
Mode
Solid green
The router is powered on.
No light
The router is powered off.
Blinking blue
Attempting to add a wireless device via the WPS
function.
Solid green
The Internet connection is established.
Solid red
The Internet connection is not established.
Solid green
The cable is connected to the port.
Blinking green
The WAN interface is active (upstream or downstream
traffic).
No light
The cable is not connected.
Solid green
A device (computer) is connected to the relevant port,
the connection is on.
Blinking green
The LAN port is active (upstream or downstream
traffic).
No light
The cable is not connected to the relevant port.
Solid green
The router's WLAN of the 2.4GHz band is on, the
WLAN of the 5GHz band is off.
Solid red
The router's WLAN of the 5GHz band is on, the WLAN
of the 2.4GHz band is off.
Solid orange
The 2.4GHz and 5GHz bands are on.
Blinking
The WLAN interface of one or both bands is active
(upstream or downstream traffic).
No light
The 2.4GHz and 5GHz bands are off.
STATUS
WAN
LAN 1-4
WLAN
Description
Page 13 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Overview
User Manual
On the front panel of the router there is a WPS button designed to set up a secure wireless
connection (the WPS function) and enable/disable the wireless network.
To use the WPS function: with the device turned on, push the button, hold it for 2 seconds, and
release. The POWER LED should be blinking blue.
To enable/disable the router's wireless network: with the device turned on, press the button, hold for
10 seconds, and then release it.
Page 14 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Overview
User Manual
Back Panel
Figure 2. Back panel view.
Port
Description
INTERNET
A port to connect to a cable or DSL modem or to a private Ethernet
line (it is recommended to use the cable included in the delivery
package).
LAN 1-4
USB
4 Ethernet ports to connect computers or network devices.
A port for connecting a USB device (modem, storage, printer).
A button to restore the factory default settings.
RESET
To restore the factory defaults, push the button (with the device turned
on), hold it for 10 seconds, and then release the button.
ON/OFF
A button to turn the router on/off.
12VDC IN
Power connector.
The device is also equipped with two external non-detachable Wi-Fi antennas.
Page 15 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Overview
User Manual
Delivery Package
The following should be included:
•
Router DIR-825/AC
•
Power adapter DC 12V/1.5A
•
Ethernet cable (CAT 5E)
•
“Quick Installation Guide” (brochure).
The “User Manual” and “Quick Installation Guide” documents are available on D-Link website
(see www.dlink.ru).
!
Using a power supply with a different voltage rating than the one included will cause
damage and void the warranty for this product.
Page 16 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
CHAPTER 3.
INSTALLATION AND CONNECTION
Before You Begin
Please, read this manual prior to installing the device. Make sure that you have all the necessary
information and equipment.
Operating System
Configuration of the wireless AC1200 dual band Gigabit router with 3G/CDMA/LTE support and
USB port DIR-825/AC (hereinafter referred to as “the router”) is performed via the built-in webbased interface. The web-based interface is available from any operating system that supports a web
browser.
Web Browser
The following web browsers are recommended:
•
Apple Safari 5 and later
•
Google Chrome 5 and later
•
Microsoft Internet Explorer 8 and later
•
Mozilla Firefox 5 and later
•
Opera 10 and later.
For successful operation, JavaScript should be enabled on the web browser. Make sure that
JavaScript has not been disabled by other software (such as virus protection or web user security
packages) running on your computer.
Wired or Wireless NIC (Ethernet or Wi-Fi Adapter)
Any computer that uses the router should be equipped with an Ethernet or Wi-Fi adapter (NIC). If
your computer is not equipped with such a device, install an Ethernet or Wi-Fi adapter prior to using
the router.
Wireless Connection
Wireless workstations from your network should be equipped with a wireless 802.11a, b, g, n, or ac
NIC (Wi-Fi adapter). In addition, you should specify the values of SSID, channel number and
security settings defined in the web-based interface of the router for all these wireless workstations.
Page 17 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
USB Modem
To connect to an LTE, 3G GSM or CDMA network, you should use a USB modem. Connect it to
the USB port of the router, then access the web-based interface of the router, and you will be able to
configure a connection to the Internet6.
Your USB modem should be equipped with an active identification card (SIM or R-UIM)
of your operator.
!
Some operators require subscribers to activate their USB modems prior to using them.
Please, refer to connection guidelines provided by your operator when concluding the
agreement or placed on its website.
For LTE and CDMA USB modems, it is required to disable the PIN code check on the
identification card prior to connecting the USB modem to the router.
6 Contact your operator to get information on the service coverage and fees.
Page 18 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
Connecting to PC
PC with Ethernet Adapter
1. Make sure that your PC is powered off.
2. Connect an Ethernet cable between any of LAN ports located on the back panel of the router
and the Ethernet port of your PC.
3. To connect via an LTE, 3G GSM or CDMA network: connect your USB modem to the USB
port7 located on the back panel of the router.
!
If you need to connect or change a USB modem to another one when the router is powered
on, power off the router, connect the modem to the USB port, and power on the router.
4. Connect the power cord to the power connector port on the back panel of the router, then
plug the power adapter into an electrical outlet or power strip.
5. Turn on the router by pressing the ON/OFF button on its back panel.
6. Turn on your PC and wait until your operating system is completely loaded.
Obtaining IP Address Automatically in OS Windows XP
1. Click the Start button and proceed to the Control Panel > Network and Internet
Connections > Network Connections window.
2. In the Network Connections window, right-click the relevant Local Area Connection
icon and select the Properties line in the menu displayed.
Figure 3. The Network Connections window.
7 It is recommended to use a USB extension cable to connect a USB modem to the router.
Page 19 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
3. In the Local Area Connection Properties window, on the General tab, select the
Internet Protocol (TCP/IP) line. Click the Properties button.
Figure 4. The Local Area Connection Properties window.
Page 20 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
4. Select the Obtain an IP address automatically and Obtain DNS server address
automatically radio buttons. Click the OK button.
Figure 5. The Internet Protocol (TCP/IP) Properties window.
5. Click the ОК button in the connection properties window.
Now your computer is configured to obtain an IP address automatically.
Page 21 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
Obtaining IP Address Automatically in OS Windows 7
1. Click the Start button and proceed to the Control Panel window.
2. Select the Network and Sharing Center section. (If the Control Panel has the category
view (the Category value is selected from the View by drop-down list in the top right
corner of the window), choose the View network status and tasks line under the
Network and Internet section.)
Figure 6. The Control Panel window.
Page 22 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
3. In the menu located on the left part of the window, select the Change adapter settings
line.
Figure 7. The Network and Sharing Center window.
Page 23 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
4. In the opened window, right-click the relevant Local Area Connection icon and select
the Properties line in the menu displayed.
Figure 8. The Network Connections window.
Page 24 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
5. In the Local Area Connection Properties window, on the Networking tab, select the
Internet Protocol Version 4 (TCP/IPv4) line. Click the Properties button.
Figure 9. The Local Area Connection Properties window.
Page 25 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
6. Select the Obtain an IP address automatically and Obtain DNS server address
automatically radio buttons. Click the OK button.
Figure 10. The Internet Protocol Version 4 (TCP/IPv4) Properties window.
7. Click the OK button in the connection properties window.
Now your computer is configured to obtain an IP address automatically.
Page 26 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
PC with Wi-Fi Adapter
1. To connect via an LTE, 3G GSM or CDMA network: connect your USB modem to the USB
port8 located on the back panel of the router.
!
If you need to connect or change a USB modem to another one when the router is powered
on, power off the device, connect the modem to the USB port, and power on the router.
2. Connect the power cord to the power connector port on the back panel of the router, then
plug the power adapter into an electrical outlet or power strip.
3. Turn on the router by pressing the ON/OFF button on its back panel.
4. Turn on your PC and wait until your operating system is completely loaded.
5. Turn on your Wi-Fi adapter. As a rule, modern notebooks with built-in wireless NICs are
equipped with a button or switch that turns on/off the wireless adapter (refer to your PC
documents). If your PC is equipped with a pluggable wireless NIC, install the software
provided with your Wi-Fi adapter.
8 It is recommended to use a USB extension cable to connect a USB modem to the router.
Page 27 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
Configuring Wi-Fi Adapter in OS Windows XP
1. Click the Start button and proceed to the Control Panel > Network and Internet
Connections > Network Connections window.
2. Select the icon of the wireless network connection and make sure that your Wi-Fi adapter is
on.
Figure 11. The Network Connections window.
3. Search for available wireless networks.
4. In the opened Wireless Network Connection window, select the wireless network DIR825 (for operating in the 2.4GHz band) or DIR-825-5G (for operating in the 5GHz band)
and click the Connect button.
After that the Wireless Network Connection Status window appears.
!
If you perform initial configuration of the router via Wi-Fi connection, note that
immediately after changing the wireless default settings of the router you will need to
reconfigure the wireless connection using the newly specified settings.
Page 28 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
Configuring Wi-Fi Adapter in OS Windows 7
1. Click the Start button and proceed to the Control Panel window.
2. Select the Network and Sharing Center section. (If the Control Panel has the category
view (the Category value is selected from the View by drop-down list in the top right
corner of the window), choose the View network status and tasks line under the
Network and Internet section.)
Figure 12. The Control Panel window.
3. In the menu located on the left part of the window, select the Change adapter settings
line.
4. In the opened window, select the icon of the wireless network connection and make sure that
your Wi-Fi adapter is on.
5. To open the list of available wireless networks, select the icon of the wireless network
connection and click the Connect To button or left-click the network icon in the
notification area located on the right side of the taskbar.
Figure 13. The notification area of the taskbar.
Page 29 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
6. In the opened Wireless Network Connection window, select the wireless network DIR825 (for operating in the 2.4GHz band) or DIR-825-5G (for operating in the 5GHz band)
and click the Connect button.
Figure 14. The list of available networks.
7. Wait for about 20-30 seconds. After the connection is established, the network icon will be
displayed as the signal level scale.
!
If you perform initial configuration of the router via Wi-Fi connection, note that
immediately after changing the wireless default settings of the router you will need to
reconfigure the wireless connection using the newly specified settings.
Page 30 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
Connecting to Web-based Interface
When you have configured your computer, you can access the web-based interface and configure
needed parameters (create a WAN connection, change the parameters of the wireless network,
specify the settings of the firewall, etc.).
Start a web browser (see the Before You Begin section, page 17). In the address bar of the web
browser, enter the IP address of the router (by default, the following IP address is specified:
192.168.0.1). Press the Enter key.
Figure 15. Connecting to the web-based interface of the DIR-825/AC device.
!
If the error “The page cannot be displayed” (or “Unable to display the page”/“Could not
connect to remote server”) occurs upon connecting to the web-based interface of the router,
make sure that you have properly connected the router to your computer.
After the first access to the web-based interface you need to change the default administrator
password. Enter the new password in the Password and Confirmation fields. You may set any
password except admin. Use digits, Latin letters (uppercase and/or lowercase), and characters
available on the keyboard. Then click the Apply button.
Figure 16. The page for changing the default administrator password.
!
Remember or write down the new password for the administrator account. In case of losing
the new password, you can access the settings of the router only after restoring the factory
default settings via the hardware RESET button. This procedure wipes out all settings that
you have configured for your router.
When the web-based interface is accessed the next time and after, the login page opens. Enter the
username (admin) in the Login field and the new password in the Password field, then click the
Enter button.
Page 31 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
User Manual
Figure 17. The login page.
Page 32 of 220
Installation and Connection
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
User Manual
Web-based Interface Structure
General Information Page
After successful registration the Home / Information page opens.
Figure 18. The general information page.
Page 33 of 220
Installation and Connection
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
The web-based interface of the router is multilingual. If you need to select another language for the
web-based interface, place the mouse pointer over the English caption in the top part of the page
and select a language from the menu displayed.
Figure 19. Changing the language of the web-based interface.
The Home / Information page displays general information on the router and its software. From
the page you can quickly get to some pages of the web-based interface.
To upgrade the firmware of the router, left-click the current firmware version (the right column of
the Firmware version line) and follow the dialog box appeared.
To contact the technical support group (to send an e-mail), left-click the support e-mail address (the
right column of the Support line). After clicking the line, the e-mail client window for sending a
new letter to the specified address opens.
To edit the router's local interface parameters, left-click the IPv4, IPv6 or MAC address of the local
interface (the right column of the lines LAN IPv4, LAN IPv6, or LAN MAC correspondingly).
After clicking the line, the page for editing the LAN interface opens (for the detailed description of
the page, see the LAN section, page 125).
To configure the router's WLAN parameters, left-click the SSID of the WLAN (the right column of
the SSID 2.4GHz or SSID 5GHz line). After clicking the line, the Wi-Fi / Basic settings page
for the relevant band opens (for the detailed description of the page, see the Basic Settings section,
page 129).
To proceed to the page for configuring the Yandex.DNS web content filtering service, left-click the
name of the internet protection by Yandex section. Also you can enable/disable the service or
change the default mode directly from the general information page.
Menu Sections
To configure the router use the menu in the left part of the page.
The Monitoring section provides an interactive scheme which illustrates the router's settings and
the LAN structure.
In the Home section you can run the needed Wizard.
To configure connection to the Internet, go to the Click'n'Connect page (for the detailed
description of the Wizard, see the Click'n'Connect section, page 43).
Page 34 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
To configure the router's wireless network, go to the Wireless network settings wizard page
(for the detailed description of the Wizard, see the Wireless Network Settings Wizard section, page
70).
To configure access from the Internet to a web server located in your LAN, go to the Virtual
server settings wizard page (for the detailed description of the Wizard, see the Virtual Server
Settings Wizard section, page 76).
To configure the router to use an IPTV set-top box, go to the IPTV settings wizard page (for the
detailed description of the Wizard, see the IPTV Settings Wizard section, page 78).
The pages of the Status section display data on the current state of the router (for the description of
the pages, see the Status section, page 79).
The pages of the Net section are designed for configuring basic parameters of the LAN interface of
the router and creating a connection to the Internet (for the description of the pages, see the Net
section, page 85).
The pages of the Wi-Fi section are designed for specifying all needed settings of the router's
wireless network (for the description of the pages, see the Wi-Fi section, page 129).
The pages of the Advanced section are designed for configuring additional parameters of the
router (for the description of the pages, see the Advanced section, page 152).
The pages of the Firewall section are designed for configuring the firewall of the router (for the
description of the pages, see the Firewall section, page 172).
The pages of the 3G/LTE modem section are designed to operate the connected LTE, 3G GSM or
CDMA USB modem (for the description of the pages, see the 3G/LTE Modem section, page 181).
The pages of the USB storage section are designed to operate the connected USB storage (for the
description of the pages, see the USB Storage section, page 185).
The pages of the Transmission section are designed for configuration of the built-in Transmission
torrent client and management of downloading process (for the description of the pages, see the
Transmission section, page 192).
The pages of the Control section are designed for creating restrictions on access to the Internet (for
the description of the page, see the Control section, page 195).
The pages of the Yandex.DNS section are designed for configuring the Yandex.DNS web content
filtering service (for the description of the pages, see the Yandex.DNS section, page 197).
The pages of the System section provide functions for managing the internal system of the router
(for the description of the pages, see the System section, page 200).
Also you can find a specific page via search. To do this, enter the name of the page, wholly or
partly, in the search bar in the top part of the web-based interface page, and then select a needed
link in the search results.
Page 35 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
Notifications and System Drop-down Menu
The router's web-based interface displays the notifications in the top right part of the page.
Figure 20. The web-based interface notifications.
Click the icon displaying the number of notifications to view the complete list and click the relevant
link.
!
Note that you should regularly save the changes of the router's settings to the nonvolatile memory.
You can save the router's settings via the menu displayed when the mouse pointer is over the
System caption in the top left part of the page. Also the System menu allows you to reboot the
device, create and load the configuration backup, restore the factory defaults, update the firmware,
disable/enable the WLAN, and safely remove the USB storage connected to the router.
Figure 21. The System menu in the top part of the page.
Page 36 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
Control
Description
Click the icon to save new settings to the non-volatile memory.
Save
Also you can save the device's parameters via the Save button on
the System / Configuration page.
Click the icon to reboot the device. All unsaved changes will be lost
after the device's reboot.
Reboot device
Click the icon to save the configuration (all settings of the router) to
your PC. The configuration backup will be stored in the download
location of your web browser.
Get config backup
Also you can create the configuration backup via the Backup
button on the System / Configuration page.
Click the icon to go to the System / Configuration page.
Restore config
Click the icon to restore the factory default settings. Also you can
restore the factory defaults via the Factory button on the System /
Configuration page.
Reset to factory
Also you can restore the factory default settings via the hardware
RESET button. The button is located on the back panel of the router
next to the power connector. Push the button (with the router
powered on) and hold for 10 seconds. Then release the button.
Click the icon to update the firmware of the router.
Update firmware
Also you can update the firmware on the System / Firmware
upgrade page.
Click the icon to disable or enable the device's WLAN in the
2.4GHz band.
Wi-Fi 2.4 GHz
Also you can disable/enable the router's WLAN in the 2.4GHz band
on the Wi-Fi / Basic settings / 2.4 GHz page.
Click the icon to disable or enable the device's WLAN in the 5GHz
band.
Wi-Fi 5 GHz
Also you can disable/enable the router's WLAN in the 5GHz band
on the Wi-Fi / Basic settings / 5 GHz page.
Page 37 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Installation and Connection
User Manual
Control
Description
Click the icon to safely disconnect the USB storage.
Unmount storage
Also you can safely disconnect the USB storage on the USB
storage / Information page.
Click the icon to exit the web-based interface.
Logout
Page 38 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
CHAPTER 4. CONFIGURING
INTERFACE
VIA
WEB-BASED
Monitoring
The page displays an interactive scheme which illustrates the router's settings and the LAN
structure.
Figure 22. The Monitoring page.
Also you can modify the basic parameters of the router on the Monitoring page. To access the
router's advanced settings, click the Editing device settings link in the bottom left corner of the
page. For the detailed description of all the router's functions, see the relevant section of this
manual.
Page 39 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
The interactive scheme displays the following elements:
Control
Description
The Internet element displays information on the active
connection. Place the mouse pointer over the icon to switch to
another connection, remove existing connections, or add new ones.
Internet
If the Ethernet cable provided by your ISP is connected to the WAN
port of the router, to the left, the name of the active connection,
received or specified IP address, and the MAC address of this
connection are displayed. You can change the MAC address in the
editing mode or clone the MAC address of a connected device by
placing the mouse pointer over the Clone MAC address icon
( ).
To the right, the approximate data transfer rate and the total value of
the received data are displayed.
Firewall
The Firewall element displays the number of the IP filter active
rules. Place the mouse pointer over the icon to view the list of the IP
filter rules, remove existing rules, add new ones, or quickly switch
the filtering mode for a rule.
The Control element displays the number of blocked/allowed web
sites. Place the mouse pointer over the icon to view the list of web
sites, remove existing entries, or add new ones.
Use the Enable/Disable URL-filter switch (
disable the URL filter.
Control
Device
MAC Filter
) to enable or
Use the drop-down list to the right of the element to quickly change
the operating mode: block access to web sites from the list or allow
access to web sites from the list.
The Device element displays the layout of your device. Place
mouse pointer over the top right corner of this icon to display
system menu which helps you to reboot the device, save
configuration, restore the factory default settings, update
firmware, exit the web-based interface.
the
the
the
the
The MAC Filter element displays the total number of clients to
which the filtering rules are applied and the number of blocked
clients. Place the mouse pointer over the icon to view the list of
filtered clients, remove existing clients, add new ones, or quickly
switch the filtering mode for a client.
Page 40 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Control
Virtual Servers
Description
The Virtual Servers element is designed for redirecting incoming
traffic to a specific IP address in the LAN. It displays the total
number of rules for redirecting traffic and the number of rules active
in this specific LAN. Place the mouse pointer over the icon to view
the list of all rules for redirecting traffic, remove existing rules, or
add new ones.
The DHCP element is a scale where the range of the DHCP server
addresses is placed. Dynamic clients receive IP addresses from this
range.
DHCP
Dynamic Clients
Static Clients
Use the Enable/Disable DHCP Server switch ( ) to enable or
disable DHCP server. If you want to change the range, enter a value
from the keyboard in the editing mode or move the sliders. In the
editing mode, you can specify the subnet mask.
The Dynamic Clients area displays all connected dynamic clients.
An icon of a client displays the name of a device, its MAC address,
and received IP address. The list of actions available for each client
is displayed when the mouse pointer is over an icon. If you want to
assign the current IP address to the MAC address of the client, drag
and drop its icon to the static clients area.
The Static Clients area displays all static clients. An icon of a
client displays the name of a device, its MAC address, and received
IP address. The list of actions available for each client is displayed
when the mouse pointer is over an icon. If you want to break the
binding between the MAC address of the client and its current IP
address, drag and drop its icon to the dynamic clients area. Use the
Add client button to add static clients.
Page 41 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Control
Description
The Wireless element displays information on Wi-Fi module
operation. To the left, the name of the access point is displayed. You
can change it in the editing mode.
Use the Hide Access Point switch ( / ) to forbid or allow other
users to see your wireless network.
Use the Enable/Disable Wireless switch (
disable your wireless network.
Wireless
) to enable or
To the right, the standards of devices which can connect to the
access point are displayed. You can select other standards from the
drop-down list.
Use the Enable/Disable password protection switch ( / )
to modify security settings of your wireless network. If you want to
view or change the password, switch to the editing mode of the
relevant field.
For the 2.4GHz band only.
The Wireless (Client Mode) element displays operation of Wi-Fi
module in the client mode. To the right of the graphical
representation of another access point, its name and MAC address
are displayed.
Wireless (Client Mode)
Use the Disable client mode switch (
mode.
) to disable the client
The Wi-Fi Filter element displays the number of MAC addresses
specified in the MAC filter. The element is unavailable when the
Wi-Fi module is in the client mode. Place the mouse pointer over
the icon to view the list of MAC addresses, remove existing
addresses, or add new ones.
Wi-Fi Filter
Use the Enable/Disable Wi-Fi filter switch (
disable the Wi-Fi filter.
) to enable or
Use the drop-down list to the right of the element to quickly change
the mode of the filter (allow or forbid access to your wireless
network).
In this section, you can contact the technical support group (to send an e-mail). To do this, left-click
the support e-mail address in the bottom right corner of the page. After clicking the line, the e-mail
client window for sending a new letter to the specified address opens.
Page 42 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Click'n'Connect
To configure connection to the Internet, click the Click'n'Connect link in the Home section.
Figure 23. Configuring connection to the Internet.
Connect the Ethernet cable provided by your ISP to the WAN port of the router. Verify the relevant
LED (the WAN LED should be on).
Click the Next button to continue.
Page 43 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 24. The page for selecting a 3G network operator.
On the opened page, from the Provider drop-down list, select your country and operator if you are
going to configure a 3G network connection, or leave the Manually value, if you are going to
configure a wired, LTE WAN connection or you want to specify all settings for your 3G WAN
connection independently.
Click the Next button to continue.
Page 44 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 25. The page for selecting the connection type.
On the opened page, select the needed choice of the radio button and click the Next button.
Page 45 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Creating WAN Connection
PPPoE Connection
Figure 26. Configuring PPPoE WAN connection.
In the Connection name field, specify a name for the connection for easier identification.
In the Username field, enter your login, and in the Password and Password confirmation
fields – the password provided by your ISP.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating PPPoE WAN Connection section, page 86).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 64).
Page 46 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
IPv6 PPPoE or PPPoE Dual Stack Connection
Figure 27. Configuring IPv6 PPPoE WAN connection.
In the Connection name field, specify a name for the connection for easier identification.
In the Username field, enter your login, and in the Password and Password confirmation
fields – the password provided by your ISP.
If you need to specify the gateway address manually, deselect the SLAAC checkbox and fill in the
Static IPv6 gateway address field.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating IPv6 PPPoE or PPPoE Dual Stack WAN Connection section, page 90).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 64).
Page 47 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Static IP Connection
Figure 28. Configuring Static IP WAN connection.
In the Connection name field, specify a name for the connection for easier identification.
Fill in the IP Address and Netmask fields.
In the Gateway IP address field, enter the IP address of the gateway used by this WAN
connection.
In the Primary DNS server field, enter the address of the primary DNS server.
If your wired ISP uses authorization via the 802.1x protocol, in the Authorization via 802.1x
protocol section, select the Authorization in the ISP's network via 802.1x protocol
checkbox and fill in the fields of the section in accordance with data provided by your ISP.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating Static IP or Dynamic IP WAN Connection section, page 96).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 64).
Page 48 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Dynamic IP Connection
Figure 29. Configuring Dynamic IP WAN connection.
In the Connection name field, specify a name for the connection for easier identification.
If your ISP has provided the addresses of the DNS servers, deselect the Obtain DNS server
addresses automatically checkbox and fill in the Primary DNS server field.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating Static IP or Dynamic IP WAN Connection section, page 96).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 64).
Page 49 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Static IPv6 Connection
Figure 30. Configuring Static IPv6 WAN connection.
In the Connection name field, specify a name for the connection for easier identification.
Fill in the IPv6 address and Gateway IPv6 address fields.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating Static IPv6 or Dynamic IPv6 WAN Connection section, page 101).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 64).
Page 50 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Dynamic IPv6 Connection
Figure 31. Configuring Dynamic IPv6 WAN connection.
In the Connection name field, specify a name for the connection for easier identification.
If your ISP has provided the addresses of the DNS servers, deselect the Obtain DNS server
addresses automatically checkbox and fill in the Static primary DNS server field.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating Static IPv6 or Dynamic IPv6 WAN Connection section, page 101).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 64).
Page 51 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
PPPoE + Static IP Connection
Figure 32. Configuring PPPoE + Static IP WAN connection.
Fill in the IP Address and Netmask fields.
In the Gateway IP address field, enter the IP address of the gateway used by this WAN
connection.
In the Primary DNS server field, enter the address of the primary DNS server.
If your wired ISP uses authorization via the 802.1x protocol, in the Authorization via 802.1x
protocol section, select the Authorization in the ISP's network via 802.1x protocol
checkbox and fill in the fields of the section in accordance with data provided by your ISP.
As a rule, the specified settings are enough at this step to configure a connection of the selected
type. If you need to specify additional settings, open the expert settings mode. To do this, use the
switch in the bottom left corner of the page (for a detailed description of all the connection's
parameters, see the Creating PPPoE + Static IP or PPPoE + Dynamic IP WAN Connection
section, page 105).
Click the Next button to continue.
Page 52 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
If needed, enter the IP addresses of the ISP's local resources.
Figure 33. Configuring PPPoE + Static IP WAN connection.
Click the Next button to continue.
Page 53 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 34. Configuring PPPoE + Static IP WAN connection.
In the Connection name field, specify a name for the connection for easier identification.
In the Username field, enter your login, and in the Password and Password confirmation
fields – the password provided by your ISP.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating PPPoE + Static IP or PPPoE + Dynamic IP WAN Connection section, page 105).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 64).
Page 54 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
PPPoE + Dynamic IP Connection
Figure 35. Configuring PPPoE + Dynamic IP WAN connection.
If your ISP has provided the addresses of the DNS servers, deselect the Obtain DNS server
addresses automatically checkbox and fill in the Primary DNS server field.
As a rule, the specified settings are enough at this step to configure a connection of the selected
type. If you need to specify additional settings, open the expert settings mode. To do this, use the
switch in the bottom left corner of the page (for a detailed description of all the connection's
parameters, see the Creating PPPoE + Static IP or PPPoE + Dynamic IP WAN Connection
section, page 105).
Click the Next button to continue.
Page 55 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 36. Configuring PPPoE + Dynamic IP WAN connection.
In the Connection name field, specify a name for the connection for easier identification.
In the Username field, enter your login, and in the Password and Password confirmation
fields – the password provided by your ISP.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating PPPoE + Static IP or PPPoE + Dynamic IP WAN Connection section, page 105).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 64).
Page 56 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
PPTP + Static IP or L2TP + Static IP Connection
Figure 37. Configuring PPTP + Static IP WAN connection.
Fill in the IP Address and Netmask fields.
In the Gateway IP address field, enter the IP address of the gateway used by this WAN
connection.
In the Primary DNS server field, enter the address of the primary DNS server.
If your wired ISP uses authorization via the 802.1x protocol, in the Authorization via 802.1x
protocol section, select the Authorization in the ISP's network via 802.1x protocol
checkbox and fill in the fields of the section in accordance with data provided by your ISP.
As a rule, the specified settings are enough to configure a non-protected connection of the selected
type. If you need to specify additional settings, open the expert settings mode. To do this, use the
switch in the bottom left corner of the page (for a detailed description of all the connection's
parameters, see the Creating PPTP/L2TP + Static IP or PPTP/L2TP + Dynamic IP WAN
Connection section, page 112).
Click the Next button to continue.
Page 57 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
If needed, enter the IP addresses of the ISP's local resources.
Figure 38. Configuring PPTP + Static IP WAN connection.
Click the Next button to continue.
Page 58 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 39. Configuring PPTP + Static IP WAN connection.
In the Connection name field, specify a name for the connection for easier identification.
In the Username field, enter your login, and in the Password and Password confirmation
fields – the password provided by your ISP.
In the VPN server address field, enter the IP or URL address of the PPTP or L2TP
authentication server.
As a rule, the specified settings are enough to configure a protected connection (the VPN tunnel). If
you need to specify additional settings, open the expert settings mode. To do this, use the switch in
the bottom left corner of the page (for a detailed description of all the connection's parameters, see
the Creating PPTP/L2TP + Static IP or PPTP/L2TP + Dynamic IP WAN Connection section,
page 112).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 64).
Page 59 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
PPTP + Dynamic IP or L2TP + Dynamic IP Connection
Figure 40. Configuring PPTP + Dynamic IP WAN connection.
If your ISP has provided the addresses of the DNS servers, deselect the Obtain DNS server
addresses automatically checkbox and fill in the Primary DNS server field.
As a rule, the specified settings are enough to configure a non-protected connection of the selected
type. If you need to specify additional settings, open the expert settings mode. To do this, use the
switch in the bottom left corner of the page (for a detailed description of all the connection's
parameters, see the Creating PPTP/L2TP + Static IP or PPTP/L2TP + Dynamic IP WAN
Connection section, page 112).
Click the Next button to continue.
Page 60 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 41. Configuring PPTP + Dynamic IP WAN connection.
In the Connection name field, specify a name for the connection for easier identification.
In the Username field, enter your login, and in the Password and Password confirmation
fields – the password provided by your ISP.
In the VPN server address field, enter the IP or URL address of the PPTP or L2TP
authentication server.
As a rule, the specified settings are enough to configure a protected connection (the VPN tunnel). If
you need to specify additional settings, open the expert settings mode. To do this, use the switch in
the bottom left corner of the page (for a detailed description of all the connection's parameters, see
the Creating PPTP/L2TP + Static IP or PPTP/L2TP + Dynamic IP WAN Connection section,
page 112).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 64).
Page 61 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
3G Connection
Figure 42. Configuring 3G WAN connection.
In the Connection name field, specify a name for the connection for easier identification.
In the Username field, enter your login, and in the Password and Password confirmation
fields – the password provided by your 3G operator.
In the APN field (for GSM USB modems only), enter the access point name, and in the Dial
number field, enter the number dialed to connect to the authorization server of the operator.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating 3G WAN Connection section, page 119).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 64).
Page 62 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
LTE Connection
!
For the USB modem Megafon M100-1, please reboot the router after finishing the Wizard.
Figure 43. Configuring LTE WAN connection.
In the Connection name field, specify a name for the connection for easier identification.
If your ISP has provided the addresses of the DNS servers, deselect the Obtain DNS server
addresses automatically checkbox and fill in the Primary DNS server field.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating LTE WAN Connection section, page 122).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 64).
Page 63 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Checking Internet Availability
On the page, you can check the WAN connection you have created.
Figure 44. Checking the Internet availability.
In the Result section, the status of the WAN connection and possible causes of malfunctions are
displayed. To recheck the status of the WAN connection, enter the IP address or name of a host in
the Address field or leave the value specified by default (google.com). Then click the
Recheck button.
Click the Back button to specify other settings.
Click the Next button to continue.
After clicking the Next button, the page for configuring the Yandex.DNS service opens (see the
Configuring Yandex.DNS Service section, page 65).
Page 64 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Configuring Yandex.DNS Service
On the page, you can enable the Yandex.DNS service and configure its operating mode.
Figure 45. Configuring the Yandex.DNS service.
To enable the Yandex.DNS service, select the Enable Yandex.DNS checkbox. Then select the
needed choice of the radio button to configure filtering for all devices of the router's network:
•
Safe mode: when this value is selected, the service blocks access to malicious and
fraudulent web sites;
•
Child mode: when this value is selected, the service blocks access to malicious and
fraudulent web sites and blocks access to adult content;
•
Protection off: when this value is selected, the service provides the DNS server with no
restrictions on access to unsafe web sites.
If you are not going to use the service, leave the Enable Yandex.DNS checkbox unselected.
Click the Next button to continue.
After clicking the Next button, the page for configuring wireless connection opens (see the
Configuring Wireless Connection section, page 66).
Page 65 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Configuring Wireless Connection
Figure 46. Selecting the operating mode for the wireless network.
If you are not going to use the wireless connection, select the Turn off choice of the Mode radio
button. Click the Next button and then click the Apply button on the opened page. After clicking
the button, the page for configuring the router to use an IPTV set-top box opens (see the
Configuring IPTV section, page 69).
If you want to connect portable devices to the Internet via wireless connection, select the Access
point choice of the Mode radio button. Click the Next button. Settings specified for the mode will
be applied to both bands of the WLAN. And the name of the 5GHz band WLAN will contain the
extra _5GHz identifier.
Page 66 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
On the opened page, in the SSID field, specify a new name for the network (use digits and Latin
characters).
Figure 47. Changing the name of the wireless LAN.
Click the Next button to continue.
Page 67 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
On the next page, you can modify security settings of the WLAN.
Select the Protected value from the Network Authentication drop-down list and enter a key (a
password that will be used to access your wireless network) in the Network key field. Use digits
and Latin characters. After applying this setting, the WPA-PSK/WPA2-PSK mixed
authentication type is specified for the router's WLAN.
When the Open value is selected, the Network key field is unavailable. After applying this
setting, the Open authentication type with no encryption is specified for the router's WLAN.
Figure 48. Selecting a security mode for the wireless network.
Click the Next button to continue.
On the next page, the specified settings are displayed. Make sure that they are correct and then click
the Apply button. After clicking the button, the page for configuring the router to use an IPTV settop box opens (see the Configuring IPTV section, page 69).
Page 68 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Configuring IPTV
On the page, you can configure the router to use an IPTV set-top box.
Figure 49. Selecting a LAN port to connect an IPTV set-top box.
On the opened page, select the LAN port of the router to which you will connect your IPTV set-top
box.
If in the future you need to disconnect your IPTV set-top box from the specified LAN port and
connect to it a computer, start the IPTV settings wizard (for the detailed description of the
Wizard, see the IPTV Settings Wizard section, page 78).
If for accessing the Internet and IPTV services your ISP uses virtual local area networks with
identifiers (VLAN ID), to configure access to the IPTV service, proceed to the Advanced / VLAN
page, create a group of ports with the required value of the VLAN ID parameter, the Bridge type,
and the port to which the set-top box will be connected (see the VLAN section, page 153, for a
detailed description of the elements from the page).
Click the Next button to continue.
Click the Skip to next button in order not to apply the IPTV settings.
Click the Apply button to save the specified settings.
After clicking the Apply button, the Home / Information page opens.
Page 69 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Wireless Network Settings Wizard
To specify all needed settings for your wireless network, click the Wireless network settings
wizard link in the Home section.
Figure 50. The page for selecting the operating mode for the wireless network.
If you are not going to use the wireless connection, select the Turn off choice of the Mode radio
button. Click the Next button and then click the Apply button on the opened page.
If you want to connect portable devices to the Internet via wireless connection, select the Access
point choice of the Mode radio button. Click the Next button. Settings specified for the mode will
be applied to both bands of the WLAN. And the name of the 5GHz band WLAN will contain the
extra _5GHz identifier.
If you want to configure the router as a client to connect to a wireless access point, select the Client
choice of the Mode radio button. Click the Next button.
Page 70 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Access Point Mode
On the opened page, in the SSID field, specify a new name for the network (use digits and Latin
characters).
Figure 51. Page for changing the name of the wireless LAN.
Click the Next button to continue.
Page 71 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
On the next page, you can modify security settings of the WLAN.
!
The default security settings do not provide sufficient protection for the WLAN. Please,
specify your own security settings for the WLAN.
Select the Protected value from the Network Authentication drop-down list and enter a key (a
password that will be used to access your wireless network) in the Network key field. Use digits
and Latin characters. After applying this setting, the WPA-PSK/WPA2-PSK mixed
authentication type is specified for the router's WLAN.
When the Open value is selected, the Network key field is unavailable. After applying this
setting, the Open authentication type with no encryption is specified for the router's WLAN.
Figure 52. Page for selecting a security mode for the wireless network.
Click the Next button to continue.
On the next page, the specified settings are displayed. Make sure that they are correct and then click
the Apply button.
Page 72 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Client Mode
On the opened page, select the band of the network to which you want to connect from the
Wireless network range drop-down list and click the Search button.
Figure 53. The page for selecting a network to connect.
Select the network to which you want to connect and click the Next button.
Page 73 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 54. The page for entering the password for connection to the wireless network.
If you need a password to connect to the selected network, enter the password in the Network key
field and click the Next button.
On the next page, you can specify an individual name (SSID) and security settings for the router or
disable the router's wireless network broadcast.
Figure 55. The page for changing the settings of the wireless local area network.
Page 74 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
If you want to use the router's wireless network in the 2.4GHz or 5GHz band to connect devices,
leave the corresponding checkbox (Enable broadcasting network 2,4GHz or Enable
broadcasting network 5GHz) selected. Then, if needed, specify another name for the network
in the SSID field (the name of the 5GHz band WLAN will contain the extra _5GHz identifier). Use
digits and Latin characters.
It is strongly recommended to configure the secure wireless network of DIR-825/AC. To do this,
select the Protected value from the Network Authentication drop-down list and enter a key (a
password that will be used to access your wireless network) in the Network key field. Use digits
and Latin characters. After applying this setting, the WPA-PSK/WPA2-PSK mixed
authentication type is specified for the router's WLAN. Click the Next button.
On the next page, the parameters of the network to which you want to connect, the entered
password, and the settings of the wireless network of the router are displayed. Make sure that the
specified settings are correct and then click the Apply button. After that, the wireless channel of
DIR-825/AC will switch to the channel of the wireless access point to which you have connected.
After configuring the device as a client, you need to create a WAN connection with relevant
parameters for the WiFiClient interface.
After clicking the Apply button, the Home / Information page opens.
Page 75 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Virtual Server Settings Wizard
To create a virtual server for redirecting incoming Internet traffic to a specified IP address in the
LAN, click the Virtual server settings wizard link in the Home section.
Figure 56. The page for adding a virtual server.
On the opened page, you can specify the following parameters:
Parameter
Description
Template
Select a virtual server template from the drop-down list, or select
Custom to specify all parameters of the new virtual server
manually.
Name
Enter a name for the virtual server for easier identification. You can
specify any name.
Interface
Select a WAN connection to which this virtual server will be
assigned.
Protocol
A protocol that will be used by the new virtual server. Select a value
from the drop-down list.
Public port (begin)/
Public port (end)
A port of the router from which traffic is directed to the IP address
specified in the Private IP field. Specify the start and the end value
for the port range. If you need to specify one port, enter the needed
value in the Public port (begin) field and leave the Public port
(end) field blank.
Page 76 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Private port (begin)/
Private port (end)
Description
A port of the IP address specified in the Private IP field to which
traffic is directed from the Public port. Specify the start and the
end value for the port range. If you need to specify one port, enter
the needed value in the Private port (begin) field and leave the
Private port (end) field blank.
Private IP
Enter the IP address of the server from the local area network. To
choose a device connected to the router's LAN at the moment, select
the relevant value from the drop-down list (the field will be filled in
automatically).
Remote IP
Enter the IP address of the server from the external network.
Enable NAT Loopback
If the checkbox is selected, users of the router's LAN can access the
server, which IP address is specified in the Private IP field, using
the router's external IP address as the server's IP address. If a DDNS
service is configured on the Advanced / DDNS page, the users can
access the server via the router's domain name.
When needed settings are configured, click the Apply button.
After clicking the Apply button, a dialog box appears.
If you are going to create a new virtual server, click the OK button. After clicking the button, the
Firewall / Virtual servers page opens (see the Virtual Servers section, page 175, for a detailed
description of the elements from the page).
If you are not going to create a new virtual server, click the Cancel button. After clicking the
button, the Home / Information page opens.
Page 77 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
IPTV Settings Wizard
To configure the router to use an IPTV set-top box, click the IPTV settings wizard link in the
Home section.
Figure 57. The page for selecting a LAN port to connect an IPTV set-top box.
On the opened page, select the LAN port of the router to which you will connect your IPTV set-top
box and click the Save button.
If in the future you need to disconnect your IPTV set-top box from the specified LAN port and
connect to it a computer, on the current page deselect the LAN port and click the Save button.
If for accessing the Internet and IPTV services your ISP uses virtual local area networks with
identifiers (VLAN ID), to configure access to the IPTV service, proceed to the Advanced / VLAN
page, create a group of ports with the required value of the VLAN ID parameter, the Bridge type,
and the port to which the set-top box will be connected (see the VLAN section, page 153, for a
detailed description of the elements from the page).
Page 78 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Status
The pages of this section display data on the current state of the router:
•
network statistics
•
IP addresses leased by the DHCP server
•
the routing table
•
data on devices connected to the router's network and its web-based interface
•
active sessions
•
addresses of active multicast groups.
Network Statistics
On the Status / Network statistics page, you can view statistics for all connections existing in
the system (WAN connections, LAN, WLAN). For each connection the following data are
displayed: name and state (when the connection is on, its name is highlighted in green, when the
connection is off, its name is highlighted in red), IP address and subnet mask, gateway (if the
connection is established), MAC address, MTU value, and volume of data received and transmitted
(with increase of the volume the units of measurement are changed automatically: byte, Kbyte,
Mbyte, Gbyte).
Figure 58. The Status / Network statistics page.
Page 79 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
DHCP
The Status / DHCP page displays the information on computers that have been identified by
hostnames and MAC addresses and have got IP addresses from the DHCP server of the device, as
well as the IP address expiration periods (the lease time).
Figure 59. The Status / DHCP page.
Page 80 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Routing Table
The Status / Routing table page displays the information on routes. The table contains
destination IP addresses, gateways, subnet masks, and other data.
Figure 60. The Status / Routing table page.
Page 81 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Clients
On the Status / Clients page, you can view the list of devices connected to the router and devices
accessing its web-based interface.
Figure 61. The Status / Clients page.
For each device the following data are displayed: the IP address, the MAC address, and the
interface to which the device is connected.
Page 82 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Active Sessions
On the Status / Active sessions page, you can view information on current sessions in the
router's network. For each session the following data are displayed: a protocol for network packet
transmission, a source IP address and port, a destination IP address and port.
Figure 62. The Status / Active sessions page.
Page 83 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Multicast groups
The Status / Multicast groups page displays addresses of active multicast groups (including
IPTV channels and groups for transferring service information) to which the device is subscribed,
and the interface through which the device is subscribed.
Figure 63. The Status / Multicast groups page.
Page 84 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Net
In this menu you can configure basic parameters of the router's local area network and configure
connection to the Internet (a WAN connection).
WAN
On the Net / WAN page, you can create and edit connections used by the router.
By default, a Dynamic IP connection and a Dynamic IPv6 connection are configured in the
system. They are assigned to the WAN port of the router. You can edit these connections or delete
them.
Figure 64. The Net / WAN page.
To create a new connection, click the Add button. On the page displayed, specify the relevant
values.
To edit an existing connection, left-click the relevant line in the table. On the page displayed,
change the parameters and click the Apply button.
To remove a connection, select the checkbox located to the left of the relevant line in the table and
click the Delete button. Also you can remove a connection on the editing page.
To use one of existing WAN connections as a default IPv4 gateway, select the choice of the Default
gateway radio button located in the line corresponding to this connection.
To use one of existing WAN connections as a default IPv6 gateway, select the choice of the Default
IPv6 gateway radio button located in the line corresponding to this connection.
Page 85 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Creating PPPoE WAN Connection
To create a connection of the PPPoE type, click the Add button on the Net / WAN page. On the
opened page, select the PPPoE value from the Connection Type drop-down list and specify the
needed values.
Figure 65. The page for creating a new PPPoE connection. The General settings section.
Parameter
Description
General settings
Provider
Leave the Manually value.
Interface
A physical or virtual interface to which the new connection will be
assigned.
Name
A name for connection for easier identification.
Enable
Select the checkbox to enable the connection.
Direction
The direction of this connection.
Page 86 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 66. The page for creating a new PPPoE connection. The Ethernet section.
Parameter
Description
Ethernet
MTU
The maximum size of units transmitted by the interface.
A MAC address assigned to the interface. This parameter is
mandatory if your ISP uses MAC address binding. In the field, enter
the MAC address registered by your ISP upon concluding the
agreement.
You can click the Clone MAC address of your computer icon
MAC
(
) to set the MAC address of the network interface card (of the
computer that is being used to configure the router at the moment)
as the MAC address of the WAN interface.
Also you can set the address of a device connected to the router's
LAN at the moment. To do this, select the relevant value from the
drop-down list (the field will be filled in automatically).
You can click the Restore default MAC address icon (
set the router's MAC address.
Page 87 of 220
) to
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 67. The page for creating a new PPPoE connection. The PPP section.
Parameter
Description
PPP
Username
Without authorization
Password
Password confirmation
A username (login) to access the Internet.
Select the checkbox if you don't need to enter a username and
password to access the Internet.
A password to access the Internet.
The confirmation of the entered password (to avoid mistypes).
Service name
The name of the PPPoE authentication server.
Authentication
algorithm
Select a required authentication method from the drop-down list or
leave the AUTO value.
MTU
The maximum size of units transmitted by the interface.
Keep Alive
Select the checkbox if you want the router to keep you connected to
your ISP even when the connection has been inactive for a specified
period of time. When the checkbox is selected, the LCP interval
and LCP fails fields are available. Specify the required values.
Dial on demand
Select the checkbox if you want the router to establish connection to
the Internet on demand. In the Maximum idle time field, specify a
period of inactivity (in seconds) after which the connection should
be terminated.
Page 88 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Description
PPP IP extension
This option is used by some ISPs. Contact your ISP to clarify if this
checkbox needs to be enabled.
Static IP Address
Fill in the field if you want to use a static IP address to access the
Internet.
PPP debug
Select the checkbox if you want to log all data on PPP connection
debugging.
Figure 68. The page for creating a new PPPoE connection. The Miscellaneous section.
Parameter
Description
Miscellaneous
Isolate connection
Enable RIP
When the checkbox is selected, the router uses an alternate routing
table for this connection. Select the checkbox only when your ISP
requires this.
Select the checkbox to allow using RIP for this connection.
Enable IGMP Multicast
Select the checkbox to allow multicast traffic from the external
network (e.g. video streaming) to be received.
NAT
Select the checkbox if you want one WAN IP address to be used for
all computers of your LAN.
Firewall
Select the checkbox to enable protection against ARP and DDoS
attacks.
Ping
Select the checkbox to allow the router to answer ping requests from
the external network through this connection. For security reasons,
it is recommended not to select this checkbox.
When all needed settings are configured, click the Apply button.
Page 89 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Creating IPv6 PPPoE or PPPoE Dual Stack WAN Connection
To create a connection of the IPv6 PPPoE or PPPoE Dual Stack type, click the Add button on the
Net / WAN page. On the opened page, select the relevant value from the Connection Type dropdown list and specify the needed values.
Figure 69. The page for creating a new IPv6 PPPoE connection. The General settings section.
Parameter
Description
General settings
Provider
Leave the Manually value.
Interface
A physical or virtual interface to which the new connection will be
assigned.
Name
A name for connection for easier identification.
Enable
Select the checkbox to enable the connection.
Direction
The direction of this connection.
Page 90 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 70. The page for creating a new IPv6 PPPoE connection. The Ethernet section.
Parameter
Description
Ethernet
MTU
The maximum size of units transmitted by the interface.
A MAC address assigned to the interface. This parameter is
mandatory if your ISP uses MAC address binding. In the field, enter
the MAC address registered by your ISP upon concluding the
agreement.
You can click the Clone MAC address of your computer icon
MAC
(
) to set the MAC address of the network interface card (of the
computer that is being used to configure the router at the moment)
as the MAC address of the WAN interface.
Also you can set the address of a device connected to the router's
LAN at the moment. To do this, select the relevant value from the
drop-down list (the field will be filled in automatically).
You can click the Restore default MAC address icon (
set the router's MAC address.
Page 91 of 220
) to
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 71. The page for creating a new IPv6 PPPoE connection. The PPP section.
Parameter
Description
PPP
Username
Without authorization
Password
Password confirmation
A username (login) to access the Internet.
Select the checkbox if you don't need to enter a username and
password to access the Internet.
A password to access the Internet.
The confirmation of the entered password (to avoid mistypes).
Service name
The name of the PPPoE authentication server.
Authentication
algorithm
Select a required authentication method from the drop-down list or
leave the AUTO value.
MTU
The maximum size of units transmitted by the interface.
Keep Alive
Select the checkbox if you want the router to keep you connected to
your ISP even when the connection has been inactive for a specified
period of time. When the checkbox is selected, the LCP interval
and LCP fails fields are available. Specify the required values.
Dial on demand
Select the checkbox if you want the router to establish connection to
the Internet on demand. In the Maximum idle time field, specify a
period of inactivity (in seconds) after which the connection should
be terminated.
PPP IP extension
This option is used by some ISPs. Contact your ISP to clarify if this
checkbox needs to be enabled.
Page 92 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Description
For the PPPoE Dual Stack type only.
Static IP Address
Fill in the field if you want to use a static IP address to access the
Internet.
Figure 72. The page for creating a new Pv6 PPPoE connection. The IPv6 section.
Parameter
Description
IPv6
Get IPv6
Select a method for IPv6 address assignment from the drop-down
list or leave the Automatically value.
Figure 73. The page for creating a new Pv6 PPPoE connection. The IPv6 gateway section.
Parameter
Description
IPv6 gateway
SLAAC
Select the checkbox to automatically assign the IPv6 gateway
address with help of SLAAC (Stateless Address Autoconfiguration).
Static IPv6 gateway
address
The static address of the IPv6 gateway. The field is available for
editing, if the SLAAC checkbox is not selected.
Page 93 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 74. The page for creating a new Pv6 PPPoE connection. The IPv6 DNS addresses section.
Parameter
Description
IPv6 DNS addresses
Obtain DNS server
addresses
automatically
Select the checkbox to configure automatic assignment of IPv6
DNS server addresses. If the checkbox is selected, the Static
primary DNS server and Static secondary DNS server fields
are not available for editing.
Static primary DNS
server/Static
secondary DNS server
Enter addresses of the primary and secondary IPv6 DNS servers in
the relevant fields.
PPP debug
Select the checkbox if you want to log all data on PPP connection
debugging.
Page 94 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 75. The page for creating a new Pv6 PPPoE connection. The Miscellaneous section.
Parameter
Description
Miscellaneous
Isolate connection
Enable RIP
When the checkbox is selected, the router uses an alternate routing
table for this connection. Select the checkbox only when your ISP
requires this.
Select the checkbox to allow using RIP for this connection.
For the PPPoE Dual Stack type only.
Enable IGMP Multicast
Select the checkbox to allow multicast traffic from the external
network (e.g. video streaming) to be received.
For the PPPoE Dual Stack type only.
NAT
Select the checkbox if you want one WAN IP address to be used for
all computers of your LAN.
Firewall
Select the checkbox to enable protection against ARP and DDoS
attacks.
Ping
Select the checkbox to allow the router to answer ping requests from
the external network through this connection. For security reasons,
it is recommended not to select this checkbox.
When all needed settings are configured, click the Apply button.
Page 95 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Creating Static IP or Dynamic IP WAN Connection
To create a connection of the Static IP or Dynamic IP type, click the Add button on the Net / WAN
page. On the opened page, select the relevant value from the Connection Type drop-down list
and specify the needed values.
Figure 76. The page for creating a new Static IP connection. The General settings section.
Parameter
Description
General settings
Provider
Leave the Manually value.
Interface
A physical or virtual interface to which the new connection will be
assigned.
Name
A name for connection for easier identification.
Enable
Select the checkbox to enable the connection.
Direction
The direction of this connection.
Page 96 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 77. The page for creating a new Static IP connection. The Ethernet section.
Parameter
Description
Ethernet
MTU
The maximum size of units transmitted by the interface.
A MAC address assigned to the interface. This parameter is
mandatory if your ISP uses MAC address binding. In the field, enter
the MAC address registered by your ISP upon concluding the
agreement.
You can click the Clone MAC address of your computer icon
MAC
(
) to set the MAC address of the network interface card (of the
computer that is being used to configure the router at the moment)
as the MAC address of the WAN interface.
Also you can set the address of a device connected to the router's
LAN at the moment. To do this, select the relevant value from the
drop-down list (the field will be filled in automatically).
You can click the Restore default MAC address icon (
set the router's MAC address.
Page 97 of 220
) to
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 78. The page for creating a new Static IP connection. The IP section.
Parameter
Description
IP
For Static IP type
IP Address
Enter an IP address for this WAN connection.
Netmask
Enter a subnet mask for this WAN connection.
Gateway IP address
Enter an IP address of the gateway used by this WAN connection.
Primary DNS server/
Enter addresses of the primary and secondary DNS servers in the
relevant fields.
Secondary DNS server
For Dynamic IP type
Obtain DNS server
addresses
automatically
Select the checkbox to configure automatic assignment of DNS
server addresses. If the checkbox is selected, the Primary DNS
server and Secondary DNS server fields are not displayed.
Primary DNS server/
Enter addresses of the primary and secondary DNS servers in the
relevant fields.
Secondary DNS server
Vendor ID
The identifier of your ISP. Optional.
Hostname
A name of the router specified by your ISP. Optional.
Page 98 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 79. The page for creating a new Static IP connection. The Authorization via 802.1x protocol
section.
Parameter
Description
Authorization via 802.1x protocol
Authorization in the
ISP’s network via
802.1x protocol
Authentication
method
Select the checkbox to allow authorization in the ISP's network via
the 802.1x protocol.
Select a needed authentication method from the drop-down list.
Username
Enter the username provided by your ISP.
Password
Enter the password provided by your ISP.
Page 99 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 80. The page for creating a new Static IP connection. The Miscellaneous section.
Parameter
Description
Miscellaneous
Isolate connection
Enable RIP
When the checkbox is selected, the router uses an alternate routing
table for this connection. Select the checkbox only when your ISP
requires this.
Select the checkbox to allow using RIP for this connection.
Enable IGMP Multicast
Select the checkbox to allow multicast traffic from the external
network (e.g. video streaming) to be received.
NAT
Select the checkbox if you want one WAN IP address to be used for
all computers of your LAN.
Firewall
Select the checkbox to enable protection against ARP and DDoS
attacks.
Ping
Select the checkbox to allow the router to answer ping requests
from the external network through this connection. For security
reasons, it is recommended not to select this checkbox.
When all needed settings are configured, click the Apply button.
Page 100 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Creating Static IPv6 or Dynamic IPv6 WAN Connection
To create a connection of the Static IPv6 or Dynamic IPv6 type, click the Add button on the Net /
WAN page. On the opened page, select the relevant value from the Connection Type drop-down
list and specify the needed values.
Figure 81. The page for creating a new Static IPv6 connection. The General settings section.
Parameter
Description
General settings
Provider
Leave the Manually value.
Interface
A physical or virtual interface to which the new connection will be
assigned.
Name
A name for connection for easier identification.
Enable
Select the checkbox to enable the connection.
Direction
The direction of this connection.
Page 101 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 82. The page for creating a new Static IPv6 connection. The Ethernet section.
Parameter
Description
Ethernet
MTU
The maximum size of units transmitted by the interface.
A MAC address assigned to the interface. This parameter is
mandatory if your ISP uses MAC address binding. In the field, enter
the MAC address registered by your ISP upon concluding the
agreement.
You can click the Clone MAC address of your computer icon
MAC
(
) to set the MAC address of the network interface card (of the
computer that is being used to configure the router at the moment)
as the MAC address of the WAN interface.
Also you can set the address of a device connected to the router's
LAN at the moment. To do this, select the relevant value from the
drop-down list (the field will be filled in automatically).
You can click the Restore default MAC address icon (
set the router's MAC address.
Page 102 of 220
) to
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 83. The page for creating a new Static IPv6 connection. The IP section.
Parameter
Description
IP
For Static IPv6 type
IPv6 address
Enter an IPv6 address for this WAN connection.
Gateway IPv6 address
Enter an IPv6 address of the gateway used by this WAN connection.
Primary IPv6 DNS
server/Secondary IPv6
DNS server
Enter addresses of the primary and secondary IPv6 DNS servers in
the relevant fields.
For Dynamic IPv6 type
Get IPv6
Select a method for IPv6 address assignment from the drop-down
list or leave the Automatically value.
Gateway by SLAAC
Select the checkbox to automatically assign the IPv6 gateway
address with help of SLAAC (Stateless Address Autoconfiguration).
Static IPv6 gateway
address
The static address of the IPv6 gateway. The field is available for
editing, if the Gateway by SLAAC checkbox is not selected.
Obtain DNS server
addresses
automatically
Select the checkbox to configure automatic assignment of IPv6
DNS server addresses. If the checkbox is selected, the Static
primary DNS server and Static secondary DNS server
fields are not available for editing.
Static primary DNS
Enter addresses of the primary and secondary IPv6 DNS servers in
server/Static secondary
the relevant fields.
DNS server
Page 103 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 84. The page for creating a new Static IPv6 connection. The Miscellaneous section.
Parameter
Description
Miscellaneous
Isolate connection
Enable RIP
When the checkbox is selected, the router uses an alternate routing
table for this connection. Select the checkbox only when your ISP
requires this.
Select the checkbox to allow using RIP for this connection.
Firewall
Select the checkbox to enable protection against ARP and DDoS
attacks.
Ping
Select the checkbox to allow the router to answer ping requests
from the external network through this connection. For security
reasons, it is recommended not to select this checkbox.
When all needed settings are configured, click the Apply button.
Page 104 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Creating PPPoE + Static IP or PPPoE + Dynamic IP WAN Connection
To create a connection of the PPPoE + Static IP or PPPoE + Dynamic IP type, click the Add button
on the Net / WAN page. On the opened page, select the relevant value from the Connection
Type drop-down list and specify the needed values.
Figure 85. The page for creating a new PPPoE + Static IP connection. The General settings section.
Parameter
Description
General settings
Provider
Leave the Manually value.
Interface
A physical or virtual interface to which the new connection will be
assigned.
Name
A name for connection for easier identification.
Enable
Select the checkbox to enable the connection.
Direction
The direction of this connection.
Page 105 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 86. The page for creating a new PPPoE + Static IP connection. The Ethernet section.
Parameter
Description
Ethernet
MTU
The maximum size of units transmitted by the interface.
A MAC address assigned to the interface. This parameter is
mandatory if your ISP uses MAC address binding. In the field, enter
the MAC address registered by your ISP upon concluding the
agreement.
You can click the Clone MAC address of your computer icon
MAC
(
) to set the MAC address of the network interface card (of the
computer that is being used to configure the router at the moment)
as the MAC address of the WAN interface.
Also you can set the address of a device connected to the router's
LAN at the moment. To do this, select the relevant value from the
drop-down list (the field will be filled in automatically).
You can click the Restore default MAC address icon (
set the router's MAC address.
Page 106 of 220
) to
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 87. The page for creating a new PPPoE + Static IP connection. The IP section.
Parameter
Description
IP
For PPPoE + Static IP type
IP Address
Enter an IP address for this WAN connection.
Netmask
Enter a subnet mask for this WAN connection.
Gateway IP address
Enter an IP address of the gateway used by this WAN connection.
Primary DNS server/
Enter addresses of the primary and secondary DNS servers in the
relevant fields.
Secondary DNS server
For PPPoE + Dynamic IP type
Obtain DNS server
addresses
automatically
Select the checkbox to configure automatic assignment of DNS
server addresses. If the checkbox is selected, the Primary DNS
server and Secondary DNS server fields are not displayed.
Primary DNS server/
Enter addresses of the primary and secondary DNS servers in the
relevant fields.
Secondary DNS server
Vendor ID
The identifier of your ISP. Optional.
Hostname
A name of the router specified by your ISP. Optional.
Page 107 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 88. The page for creating a new PPPoE + Static IP connection. The Authorization via 802.1x
protocol section.
Parameter
Description
Authorization via 802.1x protocol
Authorization in the
ISP’s network via
802.1x protocol
Authentication
method
Select the checkbox to allow authorization in the ISP's network via
the 802.1x protocol.
Select a needed authentication method from the drop-down list.
Username
Enter the username provided by your ISP.
Password
Enter the password provided by your ISP.
Page 108 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 89. The page for creating a new PPPoE + Static IP connection. The Miscellaneous section.
Parameter
Description
Miscellaneous (for IP section)
Isolate connection
Enable RIP
When the checkbox is selected, the router uses an alternate routing
table for this connection. Select the checkbox only when your ISP
requires this.
Select the checkbox to allow using RIP for this connection.
Enable IGMP Multicast
Select the checkbox to allow multicast traffic from the external
network (e.g. video streaming) to be received.
NAT
Select the checkbox if you want one WAN IP address to be used for
all computers of your LAN.
Firewall
Select the checkbox to enable protection against ARP and DDoS
attacks.
Ping
Select the checkbox to allow the router to answer ping requests
from the external network through this connection. For security
reasons, it is recommended not to select this checkbox.
Page 109 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 90. The page for creating a new PPPoE + Static IP connection. The PPP section.
Parameter
Description
PPP
Username
Without authorization
Password
Password confirmation
A username (login) to access the Internet.
Select the checkbox if you don't need to enter a username and
password to access the Internet.
A password to access the Internet.
The confirmation of the entered password (to avoid mistypes).
Service name
The name of the PPPoE authentication server.
Authentication
algorithm
Select a required authentication method from the drop-down list or
leave the AUTO value.
MTU
The maximum size of units transmitted by the interface.
Keep Alive
Select the checkbox if you want the router to keep you connected to
your ISP even when the connection has been inactive for a specified
period of time. When the checkbox is selected, the LCP interval
and LCP fails fields are available. Specify the required values.
Dial on demand
Select the checkbox if you want the router to establish connection to
the Internet on demand. In the Maximum idle time field, specify a
period of inactivity (in seconds) after which the connection should
be terminated.
Page 110 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Description
PPP IP extension
This option is used by some ISPs. Contact your ISP to clarify if this
checkbox needs to be enabled.
Static IP Address
Fill in the field if you want to use a static IP address to access the
Internet.
PPP debug
Select the checkbox if you want to log all data on PPP connection
debugging.
Figure 91. The page for creating a new PPPoE + Static IP connection. The Miscellaneous section.
Parameter
Description
Miscellaneous (for PPP section)
Isolate connection
Enable RIP
When the checkbox is selected, the router uses an alternate routing
table for this connection. Select the checkbox only when your ISP
requires this.
Select the checkbox to allow using RIP for this connection.
Enable IGMP Multicast
Select the checkbox to allow multicast traffic from the external
network (e.g. video streaming) to be received.
NAT
Select the checkbox if you want one WAN IP address to be used for
all computers of your LAN.
Firewall
Select the checkbox to enable protection against ARP and DDoS
attacks.
Ping
Select the checkbox to allow the router to answer ping requests from
the external network through this connection. For security reasons,
it is recommended not to select this checkbox.
When all needed settings are configured, click the Apply button.
Page 111 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Creating PPTP/L2TP + Static IP or PPTP/L2TP + Dynamic IP WAN Connection
To create a connection of the PPTP + Static IP, L2TP + Static IP, PPTP + Dynamic IP, or L2TP +
Dynamic IP type, click the Add button on the Net / WAN page. On the opened page, select the
relevant value from the Connection Type drop-down list and specify the needed values.
Figure 92. The page for creating a new PPTP + Static IP connection. The General settings section.
Parameter
Description
General settings
Provider
Leave the Manually value.
Interface
A physical or virtual interface to which the new connection will be
assigned.
Name
A name for connection for easier identification.
Enable
Select the checkbox to enable the connection.
Direction
The direction of this connection.
Page 112 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 93. The page for creating a new PPTP + Static IP connection. The Ethernet section.
Parameter
Description
Ethernet
MTU
The maximum size of units transmitted by the interface.
A MAC address assigned to the interface. This parameter is
mandatory if your ISP uses MAC address binding. In the field, enter
the MAC address registered by your ISP upon concluding the
agreement.
You can click the Clone MAC address of your computer icon
MAC
(
) to set the MAC address of the network interface card (of the
computer that is being used to configure the router at the moment)
as the MAC address of the WAN interface.
Also you can set the address of a device connected to the router's
LAN at the moment. To do this, select the relevant value from the
drop-down list (the field will be filled in automatically).
You can click the Restore default MAC address icon (
set the router's MAC address.
Page 113 of 220
) to
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 94. The page for creating a new PPTP + Static IP connection. The IP section.
Parameter
Description
IP
For PPTP + Static IP and L2TP + Static IP types
IP Address
Enter an IP address for this WAN connection.
Netmask
Enter a subnet mask for this WAN connection.
Gateway IP address
Enter an IP address of the gateway used by this WAN connection.
Primary DNS server/
Enter addresses of the primary and secondary DNS servers in the
relevant fields.
Secondary DNS server
For PPTP + Dynamic IP and L2TP + Dynamic IP types
Obtain DNS server
addresses
automatically
Select the checkbox to configure automatic assignment of DNS
server addresses. If the checkbox is selected, the Primary DNS
server and Secondary DNS server fields are not displayed.
Primary DNS server/
Enter addresses of the primary and secondary DNS servers in the
relevant fields.
Secondary DNS server
Vendor ID
The identifier of your ISP. Optional.
Hostname
A name of the router specified by your ISP. Optional.
Page 114 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 95. The page for creating a new PPTP + Static IP connection. The Authorization via 802.1x
protocol section.
Parameter
Description
Authorization via 802.1x protocol
Authorization in the
ISP’s network via
802.1x protocol
Authentication
method
Select the checkbox to allow authorization in the ISP's network via
the 802.1x protocol.
Select a needed authentication method from the drop-down list.
Username
Enter the username provided by your ISP.
Password
Enter the password provided by your ISP.
Isolate connection
Enable RIP
When the checkbox is selected, the router uses an alternate routing
table for this connection. Select the checkbox only when your ISP
requires this.
Select the checkbox to allow using RIP for this connection.
Enable IGMP Multicast
Select the checkbox to allow multicast traffic from the external
network (e.g. video streaming) to be received.
NAT
Select the checkbox if you want one WAN IP address to be used for
all computers of your LAN.
Firewall
Select the checkbox to enable protection against ARP and DDoS
attacks.
Ping
Select the checkbox to allow the router to answer ping requests
from the external network through this connection. For security
reasons, it is recommended not to select this checkbox.
Page 115 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 96. The page for creating a new PPTP + Static IP connection. The VPN section.
Parameter
Description
VPN
Connect automatically
Username
Without authorization
Password
Password confirmation
VPN server address
Select the checkbox to enable auto-start of the connection upon the
boot-up of the router.
A username (login) to access the Internet.
Select the checkbox if you don't need to enter a username and
password to access the Internet.
A password to access the Internet.
The confirmation of the entered password (to avoid mistypes).
The IP or URL address of the PPTP or L2TP authentication server.
Page 116 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Description
Select a method of MPPE encryption.
Encryption
•
No encrypt: MPPE encryption is not applied.
•
MPPE 40/128 bit: MPPE encryption with a 40-bit or 128-bit
key is applied.
•
MPPE 40 bit: MPPE encryption with a 40-bit key is applied.
•
MPPE 128 bit: MPPE encryption with a 128-bit key is
applied.
MPPE encryption can be applied only if the MS-CHAP, MSCHAP-V2, or AUTO value is selected from the Authentication
algorithm drop-down list.
Authentication
algorithm
MTU
Select a required authentication method from the drop-down list or
leave the AUTO value.
The maximum size of units transmitted by the interface.
Keep Alive
Select the checkbox if you want the router to keep you connected to
your ISP even when the connection has been inactive for a specified
period of time. When the checkbox is selected, the LCP interval
and LCP fails fields are available. Specify the required values.
Extra options
Advanced options of the pppd daemon which need to be specified
for this connection. Optional.
Dial on demand
Select the checkbox if you want the router to establish connection to
the Internet on demand. In the Maximum idle time field, specify a
period of inactivity (in seconds) after which the connection should
be terminated.
Static IP Address
Fill in the field if you want to use a static IP address to access the
Internet.
PPP debug
Select the checkbox if you want to log all data on PPP connection
debugging.
IP received
The IP address assigned by the ISP.
Isolate connection
Enable RIP
When the checkbox is selected, the router uses an alternate routing
table for this connection. Select the checkbox only when your ISP
requires this.
Select the checkbox to allow using RIP for this connection.
Page 117 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Description
NAT
Select the checkbox if you want one WAN IP address to be used for
all computers of your LAN.
Firewall
Select the checkbox to enable protection against ARP and DDoS
attacks.
Ping
Select the checkbox to allow the router to answer ping requests from
the external network through this connection. For security reasons,
it is recommended not to select this checkbox.
When all needed settings are configured, click the Apply button.
Page 118 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Creating 3G WAN Connection
If the PIN code check is enabled for the SIM card inserted into your USB modem, then prior to
creating a 3G WAN connection, proceed to the 3G/LTE modem / PIN menu and enter the PIN
code on the page displayed (see the 3G/LTE Modem section, page 181). Then proceed to the Net /
WAN page, click the Add button, and select the 3G value from the Connection Type drop-down
list.
Figure 97. The page for creating a new 3G connection. The General settings section.
Parameter
Description
General settings
Provider
To automatically specify all settings required to connect to the
Internet, select your country and operator from the drop-down list.
To specify all settings independently, leave the Manually value.
Interface
Select the USB value.
Name
A name for connection for easier identification.
Enable
Select the checkbox to enable the connection.
Direction
The direction of this connection.
Page 119 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 98. The page for creating a new 3G connection. The USB modem section.
Parameter
Description
USB modem
Mode
The value of the field specifies the type of the network to which the
router connects. Leave the auto value to let the router connect
automatically to an available type of network, or select a needed
value from the drop-down list.
For GSM USB modems only.
Figure 99. The page for creating a new 3G connection. The PPP section.
Parameter
Description
PPP
Username
Without authorization
Password
Password confirmation
APN
A username (login) to connect to the network of the operator.
Select the checkbox if your operator does not require authorization.
A password to connect to the network of the operator.
The confirmation of the entered password (to avoid mistypes).
An access point name. For GSM USB modems only.
Page 120 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Description
Dial number
A number dialed to connect to the authorization server of the
operator.
Authentication
algorithm
Select a required authentication method from the drop-down list or
leave the AUTO value.
MTU
The maximum size of units transmitted by the interface. Optional.
Keep Alive
Select the checkbox if you want the router to keep you connected to
the network of your operator even when the connection has been
inactive for a specified period of time. When the checkbox is
selected, the LCP interval and LCP fails fields are available.
Specify the required values.
Extra options
In the field, you can specify additional data for encryption or
authentication. Optional.
Dial on demand
Select the checkbox if you want the router to establish connection to
the Internet on demand. In the Maximum idle time field, specify a
period of inactivity (in seconds) after which the connection should
be terminated.
PPP debug
Select the checkbox if you want to log all data on PPP connection
debugging.
Figure 100. The page for creating a new 3G connection. The Miscellaneous section.
Parameter
Description
Miscellaneous
NAT
Select the checkbox if you want one WAN IP address to be used for
all computers of your LAN.
Firewall
Select the checkbox to enable protection against ARP and DDoS
attacks.
Ping
Select the checkbox to allow the router to answer ping requests from
the external network through this connection. For security reasons,
it is recommended not to select this checkbox.
When all needed settings are configured, click the Apply button.
Page 121 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Creating LTE WAN Connection
!
For the USB modem Megafon M100-1, please reboot the router after creating the WAN
connection.
To create a connection of the LTE type, click the Add button on the Net / WAN page. On the
opened page, select the relevant value from the Connection Type drop-down list and specify the
needed values.
Figure 101. The page for creating a new LTE connection. The General settings section.
Parameter
Description
General settings
Provider
Leave the Manually value.
Interface
Select the USB value.
Name
A name for connection for easier identification.
Enable
Select the checkbox to enable the connection.
Direction
The direction of this connection.
Page 122 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 102. The page for creating a new LTE connection. The USB modem section.
Parameter
Description
USB modem
Mode
The value of the field specifies the type of the network to which the
router connects. Leave the auto value to let the router connect
automatically to an available type of network, or select a needed
value from the drop-down list.9
APN
An access point name.
Figure 103. The page for creating a new LTE connection. The IP section.
Parameter
Description
IP
Obtain DNS server
addresses
automatically
Select the checkbox to configure automatic assignment of DNS
server addresses. If the checkbox is selected, the Primary DNS
server and Secondary DNS server fields are not displayed.
Primary DNS server/
Enter addresses of the primary and secondary DNS servers in the
relevant fields.
Secondary DNS server
Vendor ID
The identifier of your ISP. Optional.
Hostname
A name of the router specified by your ISP. Optional.
9 Some LTE USB modems do not support network type selection and work in the auto mode regardless of the value
selected from the drop-down list.
Page 123 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 104. The page for creating a new LTE connection. The Miscellaneous section.
Parameter
Description
Miscellaneous
NAT
Select the checkbox if you want one WAN IP address to be used for
all computers of your LAN.
Firewall
Select the checkbox to enable protection against ARP and DDoS
attacks.
Ping
Select the checkbox to allow the router to answer ping requests
from the external network through this connection. For security
reasons, it is recommended not to select this checkbox.
When all needed settings are configured, click the Apply button.
Page 124 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
LAN
To configure the router's local interface, proceed to the Net / LAN page.
Figure 105. Basic settings of the local interface.
If needed, edit the basic settings of the local interface.
Parameter
Description
IP Address
The IP address of the router in the local subnet. By default, the
following value is specified: 192.168.0.1.
Netmask
The mask of the local subnet. By default, the following value is
specified: 255.255.255.0.
IPv6 address
The IPv6 address of the router in the local subnet. By default, the
following value is specified: fd01::1/64. The field is available
for editing, if the DHCP PD checkbox is not selected.
When needed settings are configured, click the Apply button.
In the DHCP server section, you can configure the built-in DHCP server of the router.
Figure 106. The section for configuring the DHCP server.
Page 125 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Description
An operating mode of the router's DHCP server.
Mode
Enable: the router assigns IP addresses to clients automatically in
accordance with the specified parameters. When this value is
selected, the DNS Relay, Start IP, End IP, and the Lease time
fields are displayed on the page.
Disable: the router's DHCP server is disabled, clients' IP addresses
are assigned manually.
Relay: an external DHCP server is used to assign IP addresses to
clients. When this value is selected, the External DHCP server IP
field is displayed on the page.
DNS Relay
Select the checkbox so that the devices connected to the router
obtain the address of the router as the DNS server address.
Deselect the checkbox so that the devices connected to the router
obtain the address transmitted by the ISP as the DNS server address.
Start IP
The start IP address of the address pool used by the DHCP server to
distribute IP addresses to clients.
End IP
The end IP address of the address pool used by the DHCP server to
distribute IP addresses to clients.
Lease time
The lifetime of IP addresses leased by the DHCP server. At the end
of this period the leased IP address is revoked and can be distributed
to another device, unless the previous device has confirmed the need
to keep the address.
External DHCP server IP
The IP address of the external DHCP server which assigns IP
addresses to the router's clients.
When all needed settings are configured, click the Apply button.
Page 126 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
In the IPv6 DHCP server section, you can enable the DHCPv6 server of the router and select its
operating mode.
Figure 107. The section for configuring the DHCPv6 server.
Parameter
Description
Enable DHCPv6 Server
Select the checkbox to enable the DHCPv6 server of the router.
When the checkbox is selected, the State mode drop-down list and
the Leased Time field are displayed on the page.
DHCP PD
Select the checkbox to activate the Prefix Delegation function. When
the checkbox is selected, the router requests a prefix to configure
IPv6 addresses for clients of the LAN from a delegating router.
Select an operating mode of the DHCPv6 server from the drop-down
list.
State mode
Stateless: clients themselves configure IPv6 addresses using the
prefix.
Stateful: clients receive IPv6 addresses from the range specified in
the Start interface IP and End interface IP fields.
Start interface IP
The start IPv6 address of the address pool used by the DHCPv6
server to distribute addresses to clients.
End interface IP
The end IPv6 address of the address pool used by the DHCPv6
server to distribute addresses to clients.
Leased Time
The lifetime of IPv6 addresses leased by the DHCPv6 server. The
field is available for editing, if the DHCP PD checkbox is not
selected.
When all needed settings are configured, click the Apply button.
Page 127 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
In the Static DHCP section, you can specify MAC address and IP address pairs (set a fixed IPv4
address in the local area network for a device with a certain MAC address). The router assigns IP
addresses in accordance with the specified pairs only when the DHCP server is enabled (in the
DHCP server section, in the Mode drop-down list, the Enable value is selected).
Figure 108. The section for creating MAC-IP pairs.
To create a MAC-IP pair, click the Add button. In the IP field, enter an IPv4 address which will be
assigned to the device from the LAN, then in the MAC field, enter the MAC address of this device.
In the Host field, specify a network name of the device for easier identification (optional).
Also you can create a MAC-IP pair for a device connected to the router's LAN at the moment. To do
this, select the relevant value from the Known IP/MAC addresses drop-down list (the IP and
MAC fields will be filled in automatically).
When all needed MAC-IP pairs are specified, click the Apply button.
Existing MAC-IP pairs are displayed in the table of the Static DHCP section. To remove a pair,
select the checkbox in the relevant line in the table and click the Remove button. Then click the
Apply button.
Page 128 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Wi-Fi
In this menu you can specify all needed settings for your wireless network.
Basic Settings
On pages of the Wi-Fi / Basic settings section, you can enable your wireless local area network
(WLAN) and configure its basic parameters. To configure the 2.4GHz band or 5GHz band, proceed
to the relevant page.
2.4GHz Band
Figure 109. Basic settings of the wireless LAN in the 2.4GHz band.
Parameter
Description
Enable Wireless
The checkbox enables Wi-Fi connections in the 2.4GHz. If you want
to disable your WLAN in this band, deselect the checkbox.
Broadcast wireless
network
If the checkbox is not selected, devices cannot connect to the router's
2.4GHz band WLAN. Upon that the router can connect to another
access point as a wireless client.
BSSID
The unique identifier for your Wi-Fi network (for the 2.4GHz and
5GHz band). You cannot change the value of this parameter, it is
determined in the device's internal settings.
Page 129 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Description
Hide Access Point
If the checkbox is selected, other users cannot see your Wi-Fi
network. (It is recommended not to select this checkbox in order to
simplify initial configuration of your WLAN.)
SSID
A name for the WLAN. By default, the value DIR-825 is specified.
It is recommended to specify another name for the network upon
initial configuration (use digits and Latin characters).
Country
The country you are in. Select a value from the drop-down list.
Channel
The wireless channel number. When the auto value is selected, the
router itself chooses the channel with the least interference.
Wireless mode
Operating mode of the wireless network of the router. This
parameter defines standards of the devices that will be able to use
this band of your wireless network. Select a value from the dropdown list.
The maximum number of devices connected to the wireless network
Max Associated Clients of the router. When the value 0 is specified, the device does not limit
the number of connected clients.
When you have configured the parameters, click the Apply button.
5GHz Band
Figure 110. Basic settings of the wireless LAN in the 5GHz band.
Page 130 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Description
Enable Wireless
The checkbox enables Wi-Fi connections in the 5GHz. If you want
to disable your WLAN in this band, deselect the checkbox.
Broadcast wireless
network
If the checkbox is not selected, devices cannot connect to the router's
5GHz band WLAN. Upon that the router can connect to another
access point as a wireless client.
BSSID
The unique identifier for your Wi-Fi network (for the 2.4GHz and
5GHz band). You cannot change the value of this parameter, it is
determined in the device's internal settings.
Hide Access Point
If the checkbox is selected, other users cannot see your Wi-Fi
network. (It is recommended not to select this checkbox in order to
simplify initial configuration of your WLAN.)
SSID
A name for the WLAN. By default, the value DIR-825-5G is
specified. It is recommended to specify another name for the
network upon initial configuration (use digits and Latin characters).
Country
The country you are in. Select a value from the drop-down list.
Channel
The wireless channel number. When the auto value is selected, the
router itself chooses the channel with the least interference.
Wireless mode
Operating mode of the wireless network of the router. This
parameter defines standards of the devices that will be able to use
this band of your wireless network. Select a value from the dropdown list.
The maximum number of devices connected to the wireless network
Max Associated Clients of the router. When the value 0 is specified, the device does not limit
the number of connected clients.
When you have configured the parameters, click the Apply button.
Page 131 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Security Settings
On pages of the Wi-Fi / Security settings section, you can modify security settings of the
WLAN. To configure the 2.4GHz band or 5GHz band, proceed to the relevant page.
Figure 111. The default security settings.
By default, the Open network authentication type with no encryption is specified for both bands of
the WLAN.
!
The default security settings do not provide sufficient protection for the WLAN. Please,
specify your own security settings for the WLAN.
Page 132 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 112. Network authentication types supported by the router.
The router supports the following authentication types:
Authentication type
Description
Open
Open authentication (with WEP encryption for wireless network
modes not supporting 802.11n and 802.11ac devices).
Shared
Shared key authentication with WEP encryption. This authentication
type is not available when on the Wi-Fi / Basic settings page of
the relevant band, in the Wireless mode drop-down list, a mode
supporting 802.11n or 802.11ac devices is selected.
WPA
WPA-PSK
WPA2
WPA2-PSK
WPA-based authentication using a RADIUS server.
WPA-based authentication using a PSK.
WPA2-based authentication using a RADIUS server.
WPA2-based authentication using a PSK.
WPA/WPA2 mixed
A mixed type of authentication. When this value is selected, devices
using the WPA authentication type and devices using the WPA2
authentication type can connect to the WLAN of the router.
WPA-PSK/WPA2-PSK
mixed
A mixed type of authentication. When this value is selected, devices
using the WPA-PSK authentication type and devices using the
WPA2-PSK authentication type can connect to the WLAN of the
router.
Page 133 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
!
The WPA, WPA2, and WPA/WPA2 mixed authentication types require a RADIUS
server.
When the Open or Shared value is selected, the WEP Encryption settings section is displayed
(the section is unavailable for the wireless network operating modes which support the standards
802.11n and 802.11ac):
Figure 113. The Open value is selected from the Network Authentication drop-down list.
Page 134 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Description
The checkbox activating WEP encryption. When the checkbox is
selected, the Default Key ID field, the Encryption Key WEP as
Enable Encryption WEP HEX checkbox, the WEP key length drop-down list, and four
Encryption Key WEP fields are displayed on the page. For the
Shared authentication type the checkbox is always selected.
Default Key ID
The number of the key (from first to fourth) which will be used for
WEP encryption.
Encryption Key WEP as Select the checkbox to set a hexadecimal number as a key for
encryption.
HEX
The length of WEP encryption key.
WEP key length
Select the value 64bit to specify keys containing 5 ASCII symbols
or 10 HEX symbols.
Select the value 128bit to specify keys containing 13 ASCII
symbols or 26 HEX symbols.
Keys for WEP encryption. The router uses the key selected from the
Encryption Key WEP (1Default Key ID drop-down list. It is required to specify all the
4)
fields.
Page 135 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
When the WPA-PSK, WPA2-PSK, or WPA-PSK/WPA2-PSK mixed value is selected, the
WPA Encryption settings section is displayed:
Figure 114. The WPA2-PSK value is selected from the Network Authentication drop-down list.
Parameter
Description
Encryption Key PSK
A key for WPA encryption. The key can contain digits and/or Latin
characters.
WPA2 Preauthentication
The checkbox activating preliminary authentication (displayed only
for the WPA2-PSK and WPA-PSK/WPA2-PSK mixed
authentication types).
WPA Encryption
WPA renewal
An encryption method: TKIP, AES, or TKIP+AES.
The time period (in seconds), at the end of which a new key for WPA
encryption is generated. When the value 0 is specified for this field,
the key is not renewed.
Page 136 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
When the WPA, WPA2, or WPA/WPA2 mixed value is selected, the RADIUS settings and
WPA Encryption settings sections are available:
Figure 115. The WPA2 value is selected from the Network Authentication drop-down list.
Parameter
Description
WPA2 Preauthentication
The checkbox activating preliminary authentication (displayed only
for the WPA2 and WPA/WPA2 mixed authentication types).
IP address
Port
The IP address of the RADIUS server.
A port of the RADIUS server.
The password which the router uses for communication with the
RADIUS encryption key RADIUS server (the value of this parameter is specified in the
RADIUS server settings).
WPA Encryption
WPA renewal
An encryption method: TKIP, AES, or TKIP+AES.
The time period (in seconds), at the end of which a new key for WPA
encryption is generated. When the value 0 is specified for this field,
the key is not renewed.
When you have configured the parameters, click the Apply button.
Page 137 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
MAC Filter
On pages of the Wi-Fi / MAC Filter section, you can define a set of MAC addresses of devices
which will be allowed to access the WLAN, or define MAC addresses of devices which will not be
allowed to access the WLAN. Settings specified on this page are applied to both bands of the
WLAN.
Figure 116. The page for configuring the MAC filter for the wireless network.
By default, MAC filtering is not active (the Disabled value is selected from the MAC filter
restrict mode drop-down list on the Wi-Fi / MAC Filter / Filter mode page).
To open your wireless network for the devices which MAC addresses are specified on the Wi-Fi /
MAC Filter / MAC addresses page and to close the wireless network for all other devices, select
the Allow value from the MAC filter restrict mode drop-down list and click the Apply button.
To close your wireless network for the devices which MAC addresses are specified on the Wi-Fi /
MAC Filter / MAC addresses page, select the Deny value from the MAC filter restrict mode
drop-down list and click the Apply button.
To add a MAC address to which the selected filtering mode will be applied, proceed to the Wi-Fi /
MAC Filter / MAC addresses page.
Page 138 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 117. The page for adding a MAC address.
Click the Add button and enter an address in the field displayed. Also you can enter the MAC
address of a device connected to the router's LAN at the moment. To do this, select the relevant
device from the Known IP/MAC addresses drop-down list (the field will be filled in
automatically). Then click the Apply button.
To remove a MAC address from the list of MAC addresses, select the checkbox located to the left
of the relevant MAC address and click the Delete button. Then click the Apply button.
Page 139 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
List of Wi-Fi Clients
On the Wi-Fi / List of Wi-Fi clients page, you can view the list of wireless clients connected to
the router.
Figure 118. The list of the wireless clients.
If you want to disconnect a wireless device from your WLAN, select the checkbox in the line
containing the relevant MAC address, and click the Disconnect button.
To view the latest data on the devices connected to the WLAN, click the Refresh button.
Page 140 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
WPS
On pages of the Wi-Fi / WPS section, you can enable the function for secure configuration of the
WLAN and select a method used to easily add wireless devices to the WLAN.
The WPS function helps to configure the protected wireless network automatically. Devices
connecting to the wireless network via the WPS function must support the WPS function.
!
Before using the function you need to configure one of the following authentication types:
Open with no encryption, WPA2-PSK, or WPA-PSK/WPA2-PSK mixed with the
AES encryption method (on the relevant band page of the Wi-Fi / Security settings
section). When other security settings are specified for the band of the WLAN, controls of
the Wi-Fi / WPS page of the relevant band are not available.
Figure 119. The page for configuring the WPS function.
Page 141 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
To activate the WPS function, select the WPS Enable checkbox on the Wi-Fi / WPS/ 2.4 GHz or
Wi-Fi / WPS / 5 GHz page and click the Apply button. When the checkbox is selected, the
Information and Connection sections are available on the page.
Parameter
Description
Default PIN code
The PIN code of the router. This parameter is used when connecting
the router to a registrar to set the parameters of the WPS function.
The state of the WPS function:
•
Configured (all needed settings are specified; these settings
will be used upon establishing the wireless connection)
•
Unconfigured (after activating the WPS function, the SSID
and the encryption key will be configured automatically, the
network authentication type will be changed to WPA2-PSK).
WPS Status
SSID
The name of the router's WLAN.
Network Authentication The network authentication type specified for the WLAN.
Encryption
The encryption type specified for the WLAN.
Encryption key
The encryption key specified for the WLAN.
Refresh
Reset to unconfigured
Click the button to refresh the data on the page.
Click the button to reset the parameters of the WPS function.
A method of the WPS function. Select a value from the drop-down
list.
WPS Method
PIN: Connecting the device via the PIN code.
PBC: Connecting the device via the push button (actual or virtual).
PIN Code
Connect
The PIN code of the WPS-enabled device that needs to be connected
to the wireless network of the router.
The field is displayed only when the PIN value is selected from the
WPS Method drop-down list.
Click the button to connect the wireless device to the router's WLAN
via the WPS function.
Page 142 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Using WPS Function via Web-based Interface
To add a wireless device via the PIN method of the WPS function, follow the next steps:
1. Select the WPS Enable checkbox.
2. Click the Apply button.
3. Select the PIN value from the WPS Method drop-down list.
4. Select the PIN method in the software of the wireless device that you want to connect to the
router's WLAN.
5. Click the relevant button in the software of the wireless device that you want to connect to
the WLAN.
6. Right after that, enter the PIN code specified on the cover of the wireless device or in its
software in the PIN Code field.
7. Click the Connect button in the web-based interface of the router.
To add a wireless device via the PBC method of the WPS function, follow the next steps:
1. Select the WPS Enable checkbox.
2. Click the Apply button.
3. Select the PBC value from the WPS Method drop-down list.
4. Select the PBC method in the software of the wireless device that you want to connect to the
router's WLAN.
5. Click the relevant button in the software or press the WPS button on the cover of the
wireless device that you want to connect to the WLAN.
6. Click the Connect button in the web-based interface of the router.
Using WPS Function without Web-based Interface
You can add a wireless device to the router's WLAN without accessing the web-based interface of
the router. To do this, you need to configure the following router's settings:
1. Specify corresponding security settings for the wireless network of the router.
2. Select the WPS Enable checkbox.
3. Click the Apply button.
4. Save the settings and close the web-based interface (click the icon
(Save) in the
menu displayed when the mouse pointer is over the System caption in the top left part of
the page, then click the icon
(Logout)).
Page 143 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Later you will be able to add wireless devices to the WLAN by pressing the WPS button of the
router.
1. Select the PBC method in the software of the wireless device that you want to connect to the
router's WLAN.
2. Click the relevant button in the software or press the WPS button on the cover of the
wireless device that you want to connect to the WLAN.
3. Press the WPS button of the router and release. The POWER LED will start blinking blue.
Page 144 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Additional Settings
On pages of the Wi-Fi / Additional settings section, you can define additional parameters for the
WLAN of the router. To configure the 2.4GHz band or 5GHz band, proceed to the relevant page.
!
Changing parameters presented on this page may negatively affect your WLAN!
Figure 120. Additional settings of the WLAN.
The following fields are available on the page:
Parameter
Description
Station Keep Alive
The time interval (in seconds) between keep alive checks of wireless
devices from your WLAN. When the value 0 is specified, the
checking is disabled.
Beacon Period
The time interval (in milliseconds) between packets sent to
synchronize the wireless network.
RTS Threshold
The minimum size (in bites) of a packet for which an RTS frame is
transmitted.
Frag Threshold
The maximum size (in bites) of a non-fragmented packet. Larger
packets are fragmented (divided).
DTIM Period
The time period (in seconds) between sending a DTIM (a message
notifying on broadcast or multicast transmission) and data
transmission.
Page 145 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
TX Power
Drop multicast
Description
The transmit power (in percentage terms) of the router.
Select the checkbox to disable multicasting for the router's WLAN.
Deselect the checkbox to enable multicasting from WAN
connections for which the Enable IGMP Multicast checkbox is
selected.
The channel bandwidth for 802.11n devices in 2.4GHz band (the
Wi-Fi / Additional settings / 2.4GHz page).
20MHz: 802.11n devices operate at 20MHz channels.
40MHz: 802.11n devices operate at 40MHz channels.
20/40MHz -: 802.11n devices operate at 20MHz and 40MHz
channels (the channel is combined with the previous adjacent
channel).
Bandwidth
20/40MHz +: 802.11n devices operate at 20MHz and 40MHz
channels (the channel is combined with the next adjacent channel).
The channel bandwidth for 802.11ac devices in 5GHz band (the
Wi-Fi / Additional settings / 5GHz page).
20MHz: 802.11ac devices operate at 20MHz channels.
40MHz: 802.11ac devices operate at 40MHz channels.
80MHz: 802.11ac devices operate at 80MHz channels.
Guard interval (in nanoseconds). This parameter defines the interval
between symbols transmitted when the router is communicating to
wireless devices.
Short GI
Enable: the router uses the 400 ns short guard interval. Only for the
wireless network operating modes which support 802.11n or
802.11ac standard (see the value of the Wireless mode drop-down
list on the Wi-Fi / Basic settings page).
Disable: the router uses the 800 ns standard guard interval.
Enable TX
Beamforming
Select the checkbox to let the router use the TX Beamforming
technology. Such a settings allows the router to redistribute the
signal strength on the basis of location of the wireless network
clients.
When you have configured the parameters, click the Apply button.
Page 146 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
WMM
On the Wi-Fi / WMM page, you can enable the Wi-Fi Multimedia function.
The WMM function implements the QoS features for Wi-Fi networks. It helps to improve the
quality of data transfer over Wi-Fi networks by prioritizing different types of traffic.
To enable the function, select the WMM checkbox and click the Apply button.
Figure 121. The page for configuring the WMM function.
!
All needed settings for the WMM function are specified in the device's system. It is
recommended not to change the default values.
The WMM function allows assigning priorities for four Access Categories (AC):
•
AC_BK (Background), low priority traffic (print jobs, file downloads, etc.).
•
AC_BE (Best Effort), traffic from legacy devices or devices/applications that do not support
QoS.
•
AC_VI (Video).
•
AC_VO (Voice).
Parameters of the Access Categories are defined for both the router itself (in the Parameters of
Access Point section) and wireless devices connected to it (in the Parameters of Station
section).
Page 147 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
For every Access Category the following fields are available:
Parameter
Description
Aifsn
Arbitrary Inter-Frame Space Number. This parameter influences
time delays for the relevant Access Category. The lower the value,
the higher is the Access Category priority.
CWMin/CWMax
Contention Window Minimum/Contention Window Maximum. Both
fields influence time delays for the relevant Access Category. The
CWMax field value should not be lower, than the CWMin field
value. The lower the difference between the CWMax field value
and the CWMin field value, the higher is the Access Category
priority.
Txop
Transmission Opportunity. The higher the value, the higher is the
Access Category priority.
ACM
Admission Control Mandatory.
If on, prevents from using the relevant Access Category.
Acknowledgment. Answering response requests while transmitting.
Displayed only in the Parameters of Access Point section.
Ack
If off, the router answers requests.
If on, the router does not answer requests.
When you have configured the parameters, click the Apply button.
Page 148 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Client
On the Wi-Fi / Client page, you can configure the router as a client to connect to a wireless access
point.
As a rule, the client mode is used to connect to a WISP network. All parameters specified on this
page should be provided by your WISP.
Figure 122. The page for configuring the client mode.
Page 149 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
To configure the router as a client, select the Enable client checkbox. When the checkbox is
selected, the following fields are displayed on the page:
Parameter
Description
Broadcast wireless
network 2,4GHz
If the checkbox is not selected, devices cannot connect to the router's
WLAN in the 2.4GHz band. Upon that the router can connect to
another access point as a wireless client.
Broadcast wireless
network 5GHz
If the checkbox is not selected, devices cannot connect to the router's
WLAN in the 5GHz band. Upon that the router can connect to
another access point as a wireless client.
Wireless network settings
SSID
BSSID
The name of the network to which the router connects.
The unique identifier of the network to which the router connects.
Network Authentication The authentication type of the network to which the router connects.
When the Open or Shared authentication type is selected, the following fields are available:
Parameter
Description
The checkbox activating WEP encryption. When the checkbox is
selected, the Default Key ID field, the Encryption Key WEP as
Enable Encryption WEP HEX checkbox, the WEP key length drop-down list, and four
Encryption Key WEP fields are displayed on the page. For the
Shared authentication type the checkbox is always selected.
Default Key ID
The number of the key (from first to fourth) which will be used for
WEP encryption.
Encryption Key WEP as Select the checkbox to set a hexadecimal number as a key for
HEX
encryption.
The length of WEP encryption key.
WEP key length
Select the value 64bit to specify keys containing 5 ASCII symbols
or 10 HEX symbols.
Select the value 128bit to specify keys containing 13 ASCII
symbols or 26 HEX symbols.
Keys for WEP encryption. The router uses the key selected from the
Encryption Key WEP (1Default Key ID drop-down list. It is required to specify all the
4)
fields.
Page 150 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
When the WPA-PSK, WPA2-PSK, or WPA-PSK/WPA2-PSK mixed authentication type is
selected, the following fields are available:
Parameter
Description
Encryption Key PSK
A key for WPA encryption. The key can contain digits and/or Latin
characters.
WPA Encryption
An encryption method: TKIP, AES, or TKIP+AES.
When you have configured the parameters, click the Apply button.
In addition, when the Enable client checkbox is selected, the list of available wireless networks is
displayed on the page.
To view the latest data on the available 2.4GHz band wireless networks, click the Search button in
the Wireless networks in 2.4 GHz range section.
To view the latest data on the available 5GHz band wireless networks, click the Search button in
the Wireless networks in 5 GHz range section.
To connect to a wireless network from the list, select the needed network. Upon that the relevant
values are automatically inserted in the SSID, BSSID, and Network Authentication fields.
For the Open authentication type with no encryption, click the Apply button.
For the Open authentication type with encryption and the Shared authentication type, select a
needed value from the Default Key ID drop-down list. If needed, select the Encryption Key
WEP as HEX checkbox to set a hexadecimal number as a key for encryption. Then select a needed
value in the WEP key length drop-down list, fill in 4 Encryption Key WEP fields, and click the
Apply button.
For the WPA-PSK, WPA2-PSK, or WPA-PSK/WPA2-PSK mixed authentication types, fill in
the Encryption Key PSK field and click the Apply button.
After clicking the Apply button, the wireless channel of DIR-825/AC will switch to the channel of
the wireless access point to which you have connected.
After configuring the device as a client, you need to create a WAN connection with relevant
parameters for the WiFiClient interface.
Page 151 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Advanced
In this menu you can configure advanced settings of the router:
•
create groups of ports for VLANs
•
enable the UPnP IGD protocol
•
configure notifications on the reason of the Internet connection failure
•
configure a DDNS service
•
define static routes
•
create rules for remote access to the web-based interface
•
allow the router to use IGMP, SIP, RTSP, and enable the PPPoE pass through function
•
configure TR-069 client
•
enable the flow control function
•
configure VPN tunnels based on IPsec protocol.
Page 152 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
VLAN
On the Advanced / VLAN page, you can create and edit groups of ports for virtual networks
(VLANs).
By default, 2 groups are created in the router's system:
•
lan: it includes ports 1-4. You cannot delete this group.
•
wan: for the WAN interface; it includes the INTERNET port. You can edit or delete this
group.
Figure 123. The Advanced / VLAN page.
If you want to create a group including LAN ports of the router, first delete relevant records from
the lan group on this page. To do this, select the lan group, deselect the needed checkbox located to
the left of the relevant port, and click the Save button.
To create a new group for VLAN, click the Add button.
Page 153 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 124. The page for adding a group of ports for VLAN.
You can specify the following parameters:
Parameter
Description
Name
A name for the port for easier identification.
Enable
Select the checkbox to allow using this group of ports.
The type of the VLAN.
Untagged NAT. The group of this type is an external connection
with address translation. It is mostly used to transmit untagged
traffic. When this value is selected, the VLAN ID field and the
QOS, Tagged port drop-down lists are not displayed.
Type
Tagged NAT. The group of this type is an external connection with
address translation. It is mostly used to connect to the Internet. Later
the VLAN which identifier is specified in the VLAN ID field is used
to create a WAN connection (on the Net / WAN page). When this
value is selected, the Untagged ports section is not displayed.
Bridge. The group of this type is a transparent connection between
an internal port and an external connection. It is mostly used to
connect IPTV set-top boxes.
VLAN ID
QoS
An identifier of the VLAN to which this group of ports will be
assigned.
A priority tag for the type of traffic transmitted.
Page 154 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Tagged port
Description
From the list, select an available value to assign it to this group.
The section includes the ports that can be added to the group.
Untagged ports
To add a port to the group, select the needed checkbox located to the
left of the relevant port.
To remove a port from the group, deselect the needed checkbox
located to the left of the relevant port.
Click the Save button.
To edit or remove an existing group, select the relevant group on the Advanced / VLAN page. On
the page displayed, change the parameters and click the Save button, or click the Delete button.
Page 155 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
UPnP IGD
On the Advanced / UPnP IGD page, you can enable the UPnP IGD protocol. The router uses the
UPnP IGD protocol for automatic configuration of its parameters for network applications requiring
an incoming connection to the router.
Figure 125. The Advanced / UPnP IGD page.
If you want to manually specify all parameters needed for network applications, deselect the
Enabled checkbox and click the Apply button.
If you want to enable the UPnP IGD protocol in the router, select the Enabled checkbox and click
the Apply button.
When the protocol is enabled, the router's parameters configured automatically are displayed on the
page:
Parameter
Protocol
IP
Description
A protocol for network packet transmission.
The IP address of a client from the local area network.
Private port
A port of a client's IP address to which traffic is directed from a
public port of the router.
Public port
A public port of the router from which traffic is directed to a client's
IP address.
Comments
Information transmitted by a client's network application.
Page 156 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Redirect
On the Advanced / Redirect page, you can enable notifications on the reason of the Internet
connection failure. Notifications will be displayed in the browser window when a user is attempting
to open a web site on the Internet.
Figure 126. The Advanced / Redirect page.
To configure notifications, select the Enable checkbox. Then select needed checkboxes in the
Reasons for redirect section.
Parameter
Description
Reasons for redirect
Physical connection
error
The device is not
configured
No connection
Firmware update
Notifications in case of physical connection problems (the ISP's
cable is not connected, an additional device needed to access the
Internet is not connected).
Notifications in case when the device works with default settings.
Notifications in case of problems of the connection used as the
default gateway (authorization error, the IPS's server does not
respond, etc.).
Notifications in case of update of the device's firmware.
When you have configured the parameters, click the Apply button.
To disable notifications, deselect the Enable checkbox and click the Apply button.
Page 157 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
DDNS
On the Advanced / DDNS page, you can define parameters of the DDNS service, which allows
associating a domain name with dynamic IP addresses.
Figure 127. The Advanced / DDNS page.
To add a new DDNS service, click the Add button. In the line displayed, you can specify the
following parameters:
Parameter
Description
Host name
The part of the domain name specified by a user while registering at
a DDNS provider.
DDNS Service
Select a DDNS provider from the drop-down list.
Full host name
The domain name registered at your DDNS provider. The field will
be filled in automatically.
User name
The username to authorize for your DDNS provider.
User password
The password to authorize for your DDNS provider.
Update period
An interval (in minutes) between sending data on the router's
external IP address to the relevant DDNS service.
After specifying the needed parameters, click the Apply button.
Page 158 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Routing
On the Advanced / Routing page, you can add static routes (routes for networks that are not
connected directly to the device but are available through the interfaces of the device) into the
system.
Figure 128. The Advanced / Routing page.
To create a new route, click the Add button. In the line displayed, you can specify the following
parameters:
Parameter
Description
Destination network
A destination network to which this route is assigned.
Destination netmask
The destination network mask.
Gateway
An IP address through which the destination network can be accessed.
The field is available when the <Auto> value is selected from the Via
Interface drop-down list of this line.
Metric
A metric for the route. The lower the value, the higher is the route
priority. Optional.
Via Interface
Select an interface through which the destination network can be
accessed from the drop-down list. If you have selected the <Auto>
value of this drop-down list, the router itself sets the interface on the
basis of data on connected networks.
After specifying the needed parameters, click the Apply button.
Page 159 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
To edit an existing route, select a needed field in the relevant line of the table, change its value, and
click the Apply button.
To remove an existing route, select the checkbox located to the left of the relevant line in the table
and click the Delete button. Then click the Apply button.
Page 160 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
IPv6 Routing
On the Advanced / IPv6 routing page, you can add static routes (routes for networks that are not
connected directly to the device but are available through the interfaces of the device) into the
system.
Figure 129. The Advanced / IPv6 routing page.
To create a new route, click the Add button. In the line displayed, you can specify the following
parameters:
Parameter
Description
Destination network
A destination network to which this route is assigned. You can specify
an IPv6 address (2001:db8:1234::1) or an IPv6 address with a
prefix (2001:db8:1234::/64).
Gateway
An IPv6 address through which the destination network can be
accessed. The field is available when the <Auto> value is selected
from the Via Interface drop-down list of this line.
Metric
A metric for the route. The lower the value, the higher is the route
priority. Optional.
Via Interface
Select an interface through which the destination network can be
accessed from the drop-down list. If you have selected the <Auto>
value of this drop-down list, the router itself sets the interface on the
basis of data on connected networks.
After specifying the needed parameters, click the Apply button.
Page 161 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
To edit an existing route, select a needed field in the relevant line of the table, change its value, and
click the Apply button.
To remove an existing route, select the checkbox located to the left of the relevant line in the table
and click the Apply button.
Page 162 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Remote Access to Device
On the Advanced / Remote access to device page, you can configure access to the web-based
interface of the router. By default, the access from external networks to the router is closed. If you
need to allow access to the router from the external network, create relevant rules.
Figure 130. The Advanced / Remote access to device page.
To create a new rule for the IPv4-based network, click the Add button in the Remote access
configuration IPv4 section. In the line displayed, you can specify the following parameters:
Parameter
IP address
Mask
Description
A host or a subnet to which the rule is applied.
The mask of the subnet.
Public port
An external port of the router. You can specify only one port.
Protocol
The protocol available for remote management of the router.
To create a new rule for the IPv6-based network, click the Add button in the Remote access
configuration IPv6 section. In the line displayed, you can specify the following parameters:
Parameter
IP address
Protocol
Description
A host or a subnet to which the rule is applied.
The protocol available for remote management of the router.
After specifying the needed parameters, click the Apply button.
Page 163 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
To edit a rule for remote access, select a needed field in the relevant line of the table, change its
value, and click the Apply button.
To remove a rule for remote access, select the checkbox located to the left of the relevant line in the
table and click the Delete button in the relevant section. Then click the Apply button.
Page 164 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Miscellaneous
On the Advanced / Miscellaneous page, you can enable IGMP, SIP, RTSP, and the PPPoE pass
through function for the router.
IGMP is used for managing multicast traffic (transferring data to a group of destinations). This
protocol allows using network resources for some applications, e.g., for streaming video, more
efficiently.
SIP is used for creating, modifying, and terminating communication sessions. This protocol allows
telephone calls via the Internet.
RTSP is used for real-time streaming multimedia data delivery. This protocol allows some
applications to receive streaming audio/video from the Internet.
The PPPoE pass through function allows PPPoE clients of computers from your LAN to connect to
the Internet through PPPoE connections of the router.
Figure 131. The Advanced / Miscellaneous page.
To enable IGMP, select a version of IGMP from the IGMP drop-down list and click the Apply
button. Such a setting allows using the IGMP Proxy function for all WAN connections for which the
Enable IGMP Multicast checkbox is selected.
To disable IGMP, select the Off value from the IGMP drop-down list and click the Apply button.
To enable SIP, select the SIP checkbox and click the Apply button. Such a setting allows using the
SIP ALG function. This function allows VoIP traffic to pass through the NAT-enabled router.10
10 On the Net / WAN page, create a WAN connection, on the Advanced / Miscellaneous page, select the SIP
checkbox, connect the phone cable between a LAN port of the router and the IP phone. Specify SIP parameters on
the IP phone and configure it to obtain an IP address automatically (as DHCP client).
Page 165 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
To disable the SIP ALG function, deselect the SIP checkbox and click the Apply button.
To enable RTSP, select the RTSP checkbox and click the Apply button. Such a setting allows
managing media stream: fast forward streaming audio/video, pause and start it.
To disable RTSP, deselect the RTSP checkbox and click the Apply button.
To enable the PPPoE pass through function, select the PPPoE pass through checkbox and click
the Apply button.
To disable the PPPoE pass through function, deselect the PPPoE pass through checkbox and
click the Apply button.
Page 166 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
TR-069 Client
On the Advanced / TR-069 Client page, you can configure the router for communication with a
remote Auto Configuration Server (ACS).
The TR-069 client is used for remote monitoring and management of the device.
Figure 132. The page for configuring the TR-069 client.
You can specify the following parameters:
Parameter
Description
Interface
The interface which the router uses for communication with the
ACS. Leave the automatic value to let the device select the
interface basing on the routing table or select another value if
required by your ISP.
Enable TR-069 Client
Select the checkbox to enable the TR-069 client.
Page 167 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Description
Inform settings
Enable
Select the checkbox so the router may send reports (data on the
device and network statistics) to the ACS.
Interval
Specify the time period (in seconds) between sending reports.
Auto Configuration Server settings
URL address
The URL address of the ACS provided by the ISP.
User name
The username to connect to the ACS. The username can contain
digits, Latin letters (uppercase and/or lowercase), and characters
available on the keyboard.
Password
The password to connect to the ACS. The password can contain
digits, Latin letters (uppercase and/or lowercase), and characters
available on the keyboard.
ConnectionRequest Settings
User name
The username used by the ACS to transfer a connection request to
the router. The username can contain digits, Latin letters (uppercase
and/or lowercase), and characters available on the keyboard.
Password
The password used by the ACS. The password can contain digits,
Latin letters (uppercase and/or lowercase), and characters available
on the keyboard.
Request port
The port used by the ACS. By default, the port 8999 is specified.
Request path
The path used by the ACS.
When you have configured the parameters, click the Apply button.
Page 168 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Flow Control
On the Advanced / Flow Control page, you can enable and disable data flow control for the
WAN port of the router.
This function is used for equal load balancing in ISPs' networks. Contact your ISP to clarify if this
function needs to be enabled.
Figure 133. The Advanced / Flow Control page.
To enable the flow control function, select the Enabled checkbox and click the Apply button.
To disable the flow control function, deselect the Enabled checkbox and click the Apply button.
Page 169 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
IPsec
On the Advanced / IPsec page, you can configure VPN tunnels based on IPsec protocol.
IPsec is a protocol suite for securing IP communications.
Figure 134. The Advanced / IPsec page.
To allow IPsec tunnels, select the Enabled checkbox. Then click the Add button to create a new
tunnel.
Figure 135. The page for adding a VPN tunnel.
Page 170 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
!
Setting for both devices which establish the tunnel should be the same.
You can specify the following parameters:
Parameter
Description
Local subnet
A local subnet IP address and subnet mask. To configure a host IP
address, add /32.
Destination
A remote subnet IP address and subnet mask. To configure a host IP
address, add /32.
Remote IP
A remote subnet VPN gateway IP address.
Key
Encryption algorithm
Hashing algorithm
Interface
A key for mutual authentication of the parties.
Select encryption algorithm from the drop-down list.
Select hashing algorithm from the drop-down list.
Select a WAN connection through which the tunnel will pass. When
the <auto> value is selected, the router uses the connection set as the
default gateway.
Authentication
algorithm
Select authentication algorithm from the drop-down list.
IKE-SA lifetime
The lifetime of IKE-SA keys in seconds. After the specified period it is
required to renegotiate the keys. The value specified in this field
should exceed the value specified in the IPsec-SA lifetime field.
Specify 0 if you don't want to limit the lifetime of the keys.
IPsec-SA lifetime
The lifetime of IPsec-SA keys in seconds. After the specified period it
is required to renegotiate the keys. Specify 0 if you don't want to limit
the lifetime of the keys.
Click the Apply button.
To edit the parameters of an existing tunnel, select the relevant tunnel in the table. On the opened
page, change the needed parameters and click the Apply button.
To remove a tunnel, select the checkbox located to the left of the relevant line in the table and click
the Delete button.
To disable VPN tunnels based on IPsec protocol, deselect the Enabled checkbox.
Page 171 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Firewall
In this menu you can configure the firewall of the router:
•
add rules for IP filtering
•
create virtual servers
•
define a DMZ
•
configure the MAC filter.
IP Filters
On the Firewall / IP filters page, you can create new rules for filtering IP packets and edit or
remove existing rules.
Figure 136. The Firewall / IP filters page.
To create a new rule, click the Add button.
Page 172 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 137. The page for adding a rule for IP filtering.
You can specify the following parameters:
Parameter
Description
General
Protocol
A protocol for network packet transmission. Select a value from the
drop-down list.
Select an action for the rule.
Action
Allow: Allows packet transmission in accordance with the criteria
specified by the rule.
Deny: Denies packet transmission in accordance with the criteria
specified by the rule.
Activate
If the checkbox is selected, the rule is enabled. Deselect the
checkbox to disable the rule.
IP version
An IP version to which the rule will be applied. Select the relevant
value from the drop-down list.
IP Addresses
Page 173 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Description
The source host/subnet IP address.
Source IP address
To choose a device connected to the router's LAN at the moment,
select the relevant IP address from the drop-down list (the field will
be filled in automatically).
If you want to specify a range of IP addresses, click the icon
(Range) and enter the starting and ending addresses in the left and
right fields correspondingly.
The destination host/subnet IP address.
Destination IP address
To choose a device connected to the router's LAN at the moment,
select the relevant IP address from the drop-down list (the field will
be filled in automatically).
If you want to specify a range of IP addresses, click the icon
(Range) and enter the starting and ending addresses in the left and
right fields correspondingly.
Ports
Source port
A port of the source IP address. You can specify one port, several
ports separated by a comma, or a range of ports separated by a colon.
Destination port
A port of the destination IP address. You can specify one port,
several ports separated by a comma, or a range of ports separated by
a colon.
Click the Apply button.
To edit a rule for IP filtering, click the link to the relevant rule. On the opened page, change the
needed parameters and click the Apply button.
To remove a rule for IP filtering, select the checkbox located to the left of the relevant line in the
table and click the Delete button. Also you can remove a rule on the editing page.
Page 174 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Virtual Servers
On the Firewall / Virtual servers page, you can create virtual servers for redirecting incoming
Internet traffic to a specified IP address in the local area network.
Figure 138. The Firewall / Virtual servers page.
To create a new virtual server, click the Add button.
Figure 139. The page for adding a virtual server.
Page 175 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
You can specify the following parameters:
Parameter
Description
Template
Select a virtual server template from the drop-down list, or select
Custom to specify all parameters of the new virtual server
manually.
Name
A name for the virtual server for easier identification. You can
specify any name.
Interface
A WAN connection to which this virtual server will be assigned.
Protocol
A protocol that will be used by the new virtual server. Select a value
from the drop-down list.
Public port (begin)/
Public port (end)
Private port (begin)/
Private port (end)
A port of the router from which traffic is directed to the IP address
specified in the Private IP field. Specify the start and the end value
for the port range. If you need to specify one port, enter the needed
value in the Public port (begin) field and leave the Public port
(end) field blank.
A port of the IP address specified in the Private IP field to which
traffic is directed from the Public port. Specify the start and the
end value for the port range. If you need to specify one port, enter
the needed value in the Private port (begin) field and leave the
Private port (end) field blank.
Private IP
The IP address of the server from the local area network. To choose
a device connected to the router's LAN at the moment, select the
relevant value from the drop-down list (the field will be filled in
automatically).
Remote IP
The IP address of the server from the external network.
Enable NAT Loopback
If the checkbox is selected, users of the router's LAN can access the
server, which IP address is specified in the Private IP field, using
the router's external IP address as the server's IP address. If a DDNS
service is configured on the Advanced / DDNS page, the users can
access the server via the router's domain name.
Click the Apply button.
To edit the parameters of an existing server, select the relevant server in the table. On the opened
page, change the needed parameters and click the Apply button.
To remove a server, select the checkbox located to the left of the relevant line in the table and click
the Delete button. Also you can remove a server on the editing page.
To remove all servers from this page, click the Clear all button.
Page 176 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
In the Remote access configuration section, rules created on the Advanced / Remote
access to device page are displayed. If after creating virtual servers you need to edit rules for
remote access, you can quickly get to the Advanced / Remote access to device page by
clicking the link to the relevant rule.
Page 177 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
DMZ
A DMZ is a host or network segment located “between” internal (local) and external (global)
networks. In the router, the DMZ implements the capability to transfer a request coming to a port of
the DSL router from the external network to a specified host of the internal network.
On the Firewall / DMZ page you can specify the IP address of the DMZ host.
Figure 140. The Firewall / DMZ page.
To enable the DMZ, select the Enabled checkbox.
Enter the IP address of a host from your network in the IP address field. To choose a device
connected to the router's LAN at the moment, select the relevant value from the drop-down list (the
field will be filled in automatically).
If you want users of the router's LAN to access the host using the router's external IP address, select
the Enable NAT Loopback checkbox. If a DDNS service is configured on the Advanced /
DDNS page, also the users can access the host via the router's domain name.
Click the Apply button.
Note that when the DMZ is enabled, all traffic coming to a port of the WAN interface of the router
is directed to the same port of the specified IP address. Also note that virtual servers have higher
priority than the DMZ host. In other words, if there has been created a virtual server that directs
traffic from external port 80 to a port of the device from the router's local network, then entering
http://router_WAN_IP in the address bar, users of the external network are directed to the
specified port and IP address configured for the virtual server, but not to port 80 of the device with
the IP address specified on the Firewall / DMZ page.
To disable the DMZ, deselect the Enabled checkbox and click the Apply button.
Page 178 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
MAC Filter
On the Firewall / MAC filter page, you can configure MAC-address-based filtering for computers
of the router's LAN.
Figure 141. The Firewall / MAC filter page.
Select the needed action from the drop-down list to configure filtering for all devices of the router's
network:
•
Allow: Allows access to the router's network and to the Internet for devices (the value is
specified by default);
•
Deny: Blocks access to the router's network for devices.
If you need to specify a filtering mode for each device separately, create relevant rules. To do this,
click the Add button.
Page 179 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 142. The page for adding a rule for the MAC filter.
You can specify the following parameters:
Parameter
Description
MAC address
The MAC address of a device from the router's LAN. You can enter
the MAC address of a device connected to the router's LAN at the
moment. To do this, select the relevant device from the drop-down
list (the field will be filled in automatically).
Select an action for the rule.
Action
Deny: Blocks access to the router's network for the device with the
specified MAC address.
Allow: Allows access to the router's network and to the Internet for
the device with the specified MAC address when the rules on the
Firewall / IP filters page block access for this device.
Activate
If the checkbox is selected, the rule is enabled. Deselect the
checkbox to disable the rule.
After specifying the needed parameters, click the Apply button.
To edit a rule for filtering, click the link to the relevant rule. On the opened page, change the needed
parameters and click the Apply button.
To remove a rule, select the checkbox located to the left of the relevant line in the table and click
the Delete button. Also you can remove a rule on the editing page.
Page 180 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
3G/LTE Modem
This menu is designed to operate USB modems.
If the PIN code check for the SIM card inserted into your USB modem is not disabled, proceed to
the 3G/LTE modem / PIN section. On the opened page, enter the PIN code in the PIN code field
and click the Enter button11.
Figure 143. The page for checking the PIN code.
If the PIN code check for the SIM card inserted into your USB modem is disabled, an active WAN
connection will be automatically created on the Net / WAN page when connecting a USB modem
to the router12.
Some USB modems13 have an IP address from the subnet which coincides with the router's local
subnet. In this case, the relevant notification will be displayed in the web-based interface. For
proper operation of a USB modem, proceed to the Net / LAN page and change the value of the IP
Address field (for example, specify the 192.168.2.1 value). Wait until the router is rebooted.
11 For GSM USB modems only. For LTE and CDMA USB modems, it is required to disable the PIN code check on the
identification card prior to connecting the USB modem to the router.
12 For LTE and GSM USB modems only.
13 For Huawei E3272, ZTE MF823, ZTE MF827 USB modems only.
Page 181 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Information
On the 3G/LTE modem / Information page, you can view data on the USB modem connected to
the router.
Figure 144. The 3G/LTE modem / Information page.
When a USB modem is connected to the router, the following data are displayed on the page:
Parameter
Description
Vendor
The manufacturer of your USB modem.
Model
The alphanumeric code of the model of your USB modem.
Revision
The revision of the firmware of your USB modem.
IMSI
The code stored in the SIM card inserted to your USB modem.
IMEI
The code stored in the memory of the USB modem.
Signal level
The signal level at the input of the modem's receiver. The zero
signal level shows that you are out of the coverage area of the
selected operator's network.
Operator name
When the needed network is available, the name of the operator is
displayed in this field.
Mode
A type of the network to which the USB modem is connected.
Page 182 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
PIN
On pages of the 3G/LTE modem / PIN section, you can change the PIN code of the identification
card inserted into your USB modem, disable or enable the check of the PIN code.
!
The operations presented in this section are not available for LTE and CDMA USB
modems.
On the 3G/LTE modem / PIN / PIN code management page, the current state of the
identification card inserted into your USB modem is displayed in the Status field. If the PIN code
is entered incorrectly or the PIN code is not entered when the PIN code check is enabled, the
Device is locked value is displayed in the Status field. If the PIN code is entered correctly or
the PIN check is disabled, the Device is unlocked value is displayed in the Status field.
If the PIN code check for the SIM card inserted into your USB modem is not disabled, the Yes
value is displayed in the PIN check field. If the PIN check is disabled, the No value is displayed in
the PIN check field.
Figure 145. The 3G/LTE modem / PIN / PIN code management page.
To disable the PIN code check, enter the current PIN code in the PIN code field and click the
Disable PIN check button (the button is displayed if the PIN code check is enabled).
To enable the PIN code check, enter the PIN code, used before disabling the check, in the PIN
code field and click the Enable PIN check button (the button is displayed if the PIN code check
is disabled).
To change the PIN code, enable the PIN code check on the 3G/LTE modem / PIN / PIN code
management page and proceed to the 3G/LTE modem / PIN / Changing PIN code page.
Page 183 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 146. The 3G/LTE modem / PIN / Changing PIN code page.
Enter the current code in the PIN code field, then enter a new code in the New PIN code and
New PIN code confirmation fields and click the Apply button.
If upon one of the operations described above you have entered an incorrect value in the PIN code
field three times (the number of remaining attempts is displayed in the Attempts left field), the
identification card inserted into your USB modem is blocked.
For further use of the card, enter the PUK code in the relevant field, and then specify a new PIN
code for your SIM card in the New PIN code field. Click the Enter button.
Page 184 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
USB Storage
This menu is designed to operate USB storages. Here you can do the following:
•
view data on the connected USB storage
•
view content of the connected USB storage
•
configure the router as a print server
•
configure SMB-based access to the USB storage
•
enable the built-in FTP server of the router
•
enable the built-in DLNA server of the router.
Information
On the USB storage / Information page, you can view data on the USB storage connected to the
router.
Figure 147. The USB storage / Information page.
The following data are presented on the page: the name, total and free space of the storage, and the
type of its file system (supported file systems: FAT16/32, NTFS, and ext2/3).
If the USB storage is divided into volumes, several values are displayed in the USB storage dropdown list. Select the needed value to view data on the volume (partition) of the USB storage.
To safely disconnect the USB storage, click the Unmount storage button. When the
Disconnected value is displayed on the page, remove the storage from the router.
Page 185 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
To disconnect one volume of the storage, select the needed value from the USB storage dropdown list and click the Unmount volume button.
Filebrowser
On the USB storage / Filebrowser page, you can view the content of your USB storage
connected to the router and remove separate folders and files from the USB storage.
Figure 148. The USB storage / Filebrowser page.
To view the content of the USB storage, double-click the icon of the storage or storage partition.
The list of folders and files will be displayed on the page.
To proceed to a folder, select it in the directory structure on the left part of the page and doubleclick the line corresponding to this folder.
To refresh the folder contents, right-click the line corresponding to this folder, and select the
Refresh value in the menu displayed.
To remove a folder or file, right-click the line corresponding to this folder or file, and select the
Delete value in the menu displayed.
Page 186 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Print Server
On the USB storage / Print-server page, you can configure the router as a print server. Being
configured in this way, the router will allow your LAN users to share the printer connected to the
USB port of the router.
To connect a printer to the router, power off both devices. Connect printer to the USB port of the
router, power on the printer, then power on the router.
Figure 149. The USB storage / Print-server page.
To configure the router as a print server, select the Enable/Disable print-server checkbox and
click the Apply button.
If you don't want to use the router as a print server, deselect the Enable/Disable print-server
checkbox and click the Apply button.
Page 187 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Samba
On the USB storage / Samba page, you can enable the built-in Samba server of the router to
provide access to the USB storage for users of your LAN.
Figure 150. The USB storage / Samba page.
You can enable the Samba server only when a USB storage is connected to the router (in this case,
the Connected value is displayed in the USB storage field). To enable the Samba server, select
the Enable checkbox.
The Anonymous login checkbox enables anonymous access to the content of the USB storage
for users of your LAN. By default, the checkbox is selected.
If you want to provide authorized access to the content of the USB storage for users of your LAN,
deselect the checkbox. After applying the parameters on this page, proceed to the System /
Users USB page and create needed accounts.
In the Workgroup field, leave the value specified by default (WORKGROUP) or specify a new name
of a workgroup which participants will have access to the content of the USB storage.
In the Short description field, you can specify an additional description for the USB storage.
This value will be displayed in some operating systems. Use digits and/or Latin characters.
In the NetBIOS field, specify a new name of the USB storage for identification in your LAN. Use
digits and/or Latin characters.
After specifying the needed parameters, click the Apply button.
To disable the built-in Samba server of the router, deselect the Enable checkbox and click the
Apply button.
Page 188 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
FTP
On the USB storage / FTP page, you can enable the built-in FTP server of the router to provide
access to the USB storage for users of your LAN.
Figure 151. The USB storage / FTP page.
You can enable the FTP server only when a USB storage is connected to the router (in this case, the
Connected value is displayed in the USB storage field). Select the Enable checkbox; if
needed, change the router's port used by the FTP server in the Port field (by default, the standard
port 21 is specified). Then click the Apply button.
To allow access to the content of the USB storage for users of your LAN, proceed to the System /
Users USB page and create needed accounts.
To disable the built-in FTP server of the router, deselect the Enable checkbox and click the Apply
button.
Page 189 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
DLNA
On the USB storage / DLNA page, you can enable the built-in DLNA server of the router to
provide access to the USB storage for users of your LAN.
The built-in media server allows DLNA certified devices of your LAN to play multimedia content
of the USB storage. Multimedia content can be played only when a USB storage is connected to the
router.
Figure 152. The USB storage / DLNA page.
To enable the DLNA server, select the Enabled checkbox.
In the Update interval field, specify the time period (in seconds), at the end of which the media
server updates the file list of the USB storage, or leave the value specified by default (900). The
minimal value you can specify is 60 seconds.
In the DLNA server name field, specify a new name of the DLNA server for easier identification
in your LAN or leave the value specified by default (D-Link DLNA Server). Use digits and/or
Latin characters.
To allow access to the content of the USB storage for users of your LAN, click the Add button. In
the line displayed, locate a folder. To do this, click the button located to the right of the Path field
(the button is available if the Path field is selected). In the opened window, double-click the icon of
the storage or storage partition, select the needed folder in the directory structure, and click the
Open button.
For each folder you can define the type of files which will be available for users of your LAN. To
do this, select the needed type of files from the Type drop-down list. To share all files of a folder,
select the All value from the Type drop-down list.
Page 190 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
To undo the last changes, click the Reset button.
After specifying the needed parameters, click the Apply button.
To remove a folder from the list, select the checkbox in the line containing the relevant folder and
click the Apply button.
To disable the built-in DLNA server of the router, deselect the Enabled checkbox and click the
Apply button.
Page 191 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Transmission
In this menu you can configure the built-in Transmission torrent client and manage distributing and
downloading processes.
Transmission Settings
On the Transmission / Transmission settings page, you can configure all needed settings for
the built-in Transmission client.
Figure 153. The Transmission / Transmission settings page.
You can specify the following parameters:
Parameter
Enabled
Port
Description
Select the checkbox to activate the Transmission client.
The router's port which will be used by the Transmission client.
Torrents directory
The folder on the USB storage where files of the Transmission client
will be stored.
USB-storage path
The name of the USB storage in the file system of the router. If the
USB storage is divided into volumes, several values are displayed in
the drop-down list.
Page 192 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Parameter
Description
Web-interface port
The port on which the web-based interface of the Transmission
client is available.
Open files limit
The maximum number of files which clients can download
simultaneously.
Peer limit
The maximum number of the service users from which you can
download files.
Authorization
Select the checkbox if you want the Transmission client to request
for username and password when accessing its web-based interface.
Then fill in the User name and Password fields.
User name
The username to access the web-based interface of the Transmission
client.
Password
The password to access the web-based interface of the Transmission
client.
After specifying the needed parameters, click the Apply button.
In the Web-interface page field, the address of the web-based interface of the Transmission
client is displayed. To access the web-based interface of the Transmission client, click the link.
Figure 154. The web-based interface of the Transmission torrent client.
Page 193 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Using the web-based interface of the built-in Transmission torrent client you can manage the
process of downloading files to the USB storage connected to the router.
To add a new torrent file, click the button
(Open Torrent) and select a file stored on your
PC. Click the button Upload in the dialog box appeared.
To stop downloading of a file, select it in the list and click the button
Torrents).
(Pause Selected
To resume downloading of a file, select it in the list and click the button
Torrents).
To view data on a file, select it in the list and click the button
(Toggle Inspector).
To remove a file presented on the page, select it in the list and click the button
Selected Torrents).
Page 194 of 220
(Start Selected
(Remove
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Control
This menu is designed to create restrictions on access to certain web sites.
URL Filter
On the pages of the Control / URL filter section, you can specify restrictions on access to certain
web sites.
Figure 155. The Control / URL filter / Configuration page.
To enable the URL filter, select the Enable/Disable URL filter checkbox on the Control / URL
filter / Configuration page, then select a needed mode from the URL filter type drop-down list:
•
Block listed URLs: when this value is selected, the router blocks access to all addresses
specified on the Control / URL filter / Configuration page;
•
Block all URLs except listed: when this value is selected, the router allows access to
addresses specified on the Control / URL filter / Configuration page and blocks access
to all other web sites.
Click the Apply button.
To specify URL addresses to which the selected filtering will be applied, go to the Control / URL
filter / URL addresses page.
Page 195 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Figure 156. The Control / URL filter / URL addresses page.
Click the Add button and enter an address in the field displayed. Then click the Apply button.
To remove an address from the list of URL addresses, select the checkbox located to the left of the
relevant URL address and click the Delete button. Then click the Apply button.
Page 196 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Yandex.DNS
This menu is designed to configure the Yandex.DNS service.
Yandex.DNS is a web content filtering service which provides the DNS server, protect a computer
against malicious web sites, and block access to adult web sites. Click the About yandex.DNS
link in the Yandex.DNS section to get detailed information on the service.
Internet Protection Settings
On the pages of the Yandex.DNS / Internet protection settings section, you can enable the
Yandex.DNS service and configure its operating mode.
Figure 157. The Yandex.DNS / Internet protection settings / Settings page.
To enable the Yandex.DNS service, select the Enabled checkbox on the Yandex.DNS / Internet
protection settings / Settings page.
Page 197 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
When the checkbox is selected, the Default mode selection section is displayed on the page.
Select the needed choice of the radio button to configure filtering for all devices of the router's
network:
•
Safe mode: when this value is selected, the service blocks access to malicious and
fraudulent web sites;
•
Child mode: when this value is selected, the service blocks access to malicious and
fraudulent web sites and blocks access to adult content;
•
Protection off: when this value is selected, the service provides the DNS server with no
restrictions on access to unsafe web sites.
Also the selected filtering mode will be applied to all devices newly connected to the router's
network.
If you need to specify a filtering mode for each device separately, create relevant rules. To do this,
go to the Yandex.DNS / Internet protection settings / Devices page.
Figure 158. The Yandex.DNS / Internet protection settings / Devices page.
On the opened page, in the Clients without rules section, the devices which filtering mode is
specified on the Yandex.DNS / Internet protection settings / Settings page are displayed.
The name of the mode is displayed in the Mode chosen by default section.
Page 198 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
To create14 a new filtering rule for a device, click the Add button in the Rules section. In the line
displayed, you can specify the following parameters:
Parameter
Description
MAC addresses
The MAC address of a device from the router's LAN. You can enter
the MAC address of a device connected to the router's LAN at the
moment. To do this, select the relevant device from the Known
IP/MAC addresses drop-down list (the field will be filled in
automatically).
IP address
The IP address of a device from the router's LAN. You can enter the
IP address of a device connected to the router's LAN at the moment.
To do this, select the relevant device from the Known IP/MAC
addresses drop-down list (the field will be filled in
automatically).
Set the name
Enter a name for the rule for easier identification. You can specify
any name.
Select an operating mode of the Yandex.DNS service for this rule.
Mode
Child: when this value is selected, the service blocks access to
malicious and fraudulent web sites and blocks access to adult
content.
Safe: when this value is selected, the service blocks access to
malicious and fraudulent web sites.
Protection off: when this value is selected, the service provides
the DNS server with no restrictions on access to unsafe web sites.
After specifying the needed parameters, click the Apply button.
To edit a rule for filtering, select a needed field in the relevant line of the table, change its value,
and click the Apply button.
To remove a rule for filtering, select the checkbox located to the left of the relevant rule and click
the Apply button.
To disable the Yandex.DNS service, deselect the Enabled checkbox on the Yandex.DNS /
Internet protection settings / Settings page.
14 When a new rule for filtering is created, a MAC address and IP address pair is displayed on the Net / LAN page.
The created pair will be deleted with the relevant rule.
Page 199 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
System
In this menu you can do the following:
•
change the password used to access the router's settings
•
save the current settings to the non-volatile memory
•
reboot the router
•
create a backup of the router's configuration
•
restore the router's configuration from a previously saved file
•
restore the factory default settings
•
view the system log
•
update the firmware of the router
•
configure automatic notification on new firmware version
•
configure automatic synchronization of the system time or manually configure the date and
time for the router
•
check availability of a host on the Internet through the web-based interface of the router
•
trace the route to a host
•
allow or forbid access to the router via TELNET
•
create accounts for users to allow access to the content of the USB storage.
Page 200 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Administrator Password
On the System / Administrator password page, you can change the password for the
administrator account used to access the web-based interface of the router and to access the device
settings via TELNET.
!
For security reasons, it is strongly recommended to change the administrator password
upon initial configuration of the router.
Figure 159. The page for modifying the administrator password.
Enter the new password in the Password and Confirmation fields and click the Apply button.
Page 201 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Configuration
On the System / Configuration page, you can reboot the device, save the changed settings to the
non-volatile memory, restore the factory defaults, backup the current configuration, or restore the
router's configuration from a previously created file.
Figure 160. The System / Configuration page.
Page 202 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
The following buttons are available on the page:
Control
Description
Save
Click the button to save settings to the non-volatile memory. Please,
save settings every time you change the router's parameters.
Otherwise the changes will be lost upon hardware reboot of the
router.
Reboot
Click the button to reboot the device. All unsaved changes will be
lost after the device's reboot.
Factory
Click the button to restore the factory default settings. Also you can
restore the factory defaults via the hardware RESET button (see the
Back Panel section, page 15).
Backup
Click the button to save the configuration (all settings of the router)
to your PC. The configuration backup will be stored in the
download location of your web browser.
Browse
Click the button and follow the dialog box appeared to select a
previously saved configuration file (all settings of the router)
located on your PC and upload it.
Logout
Click the button to exit the web-based interface.
Actions of the Save, Reboot, Factory, Backup, and Logout buttons also can be performed via
the top-page menu displayed when the mouse pointer is over the System caption.
Page 203 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
System Log
On the System / System log / Configuration page, you can set the system log options and
configure sending the system log to a remote host.
Figure 161. The System / System log / Configuration page.
To enable logging of the system events, select the Logging checkbox. Then specify the needed
parameters.
Control
Description
Select a type of logging from the drop-down list.
Logging type
Logging level
Server
•
Local: the system log is stored in the router's memory (and
displayed on the System / System log / Log page). When
this value is selected, the Server and Port fields are not
displayed.
•
Remote: the system log is sent to the remote host specified in
the Server field.
•
Local and remote: the system log is stored in the router's
memory (and displayed on the System / System log / Log
page) and sent to the remote host specified in the Server
field.
Select a type of messages and alerts/notifications to be logged.
The IP or URL address of the host from the local or global network,
to which the system log will be sent.
Page 204 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Control
Description
Port
A port of the host specified in the Server field. By default, the value
514 is specified.
After specifying the needed parameters, click the Apply button.
To disable logging of the system events, deselect the Logging checkbox and click the Apply
button.
On the System / System log / Log page, the events specified in the Logging level list are
displayed.
Figure 162. The System / System log / Log page.
To view the latest system events, click the Refresh button.
To save the system log to your PC, click the Export button and follow the dialog box appeared.
Page 205 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Firmware Upgrade
On the System / Firmware upgrade page, you can upgrade the firmware of the router and
configure the automatic check for updates of the router's firmware.
!
Upgrade the firmware only when the router is connected to your PC via a wired
connection.
Figure 163. The System / Firmware upgrade page.
The current version of the router's firmware is displayed next the D-Link logo in the top left corner
of the page.
By default, the automatic check for the router's firmware updates is enabled. If a firmware update is
available, a notification will be displayed in the top right corner of the page.
To disable the automatic check for firmware updates, in the Remote update section, deselect the
Check for updates automatically checkbox and click the Apply settings button.
To enable the automatic check for firmware updates, in the Remote update section, select the
Check for updates automatically checkbox and click the Apply settings button. By default,
in the Remote server URL field, the D-Link update server address (fwupdate.dlink.ru) is
specified.
You can upgrade the firmware of the router locally (from the hard drive of your PC) or remotely
(from the update server).
Page 206 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Local Update
!
Attention! Do not turn off the router before the firmware upgrade is completed. This may
cause the device breakdown.
To update the firmware of the router locally, follow the next steps:
1. Download a new version of the firmware from www.dlink.ru.
2. Click the Browse button on the System / Firmware upgrade page to locate the new
firmware file.
3. Click the Update button to upgrade the firmware of the router.
4. Wait until the router is rebooted (about one and a half or two minutes).
5. Log into the web-based interface using the login (admin) and the current password.
After the upgrade is completed, the new version of the firmware will be displayed in the top left
corner of the page.
If after updating the firmware the router doesn't work correctly, please restore the factory default
settings. To do this, place the mouse pointer over the System caption in the top left corner of the
page and click the
(Reset to factory) icon. Wait until the router is rebooted.
Page 207 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Remote Update
!
Attention! Do not turn off the router before the firmware upgrade is completed. This may
cause the device breakdown.
To update the firmware of the router remotely, follow the next steps:
1. On the System / Firmware upgrade page, in the Remote update section, click the
Check for updates button to check if a newer firmware version exists.
2. Click the OK button in the window displayed to upgrade the firmware of the router. Also
you can upgrade the firmware of the router by clicking the Remote update button (the
button is displayed if a newer version of the firmware is available).
3. Wait until the router is rebooted (about one and a half or two minutes).
4. Log into the web-based interface using the login (admin) and the current password.
After the upgrade is completed, the new version of the firmware will be displayed in the top left
corner of the page.
If after updating the firmware the router doesn't work correctly, please restore the factory default
settings. To do this, place the mouse pointer over the System caption in the top left corner of the
page and click the
(Reset to factory) icon. Wait until the router is rebooted.
Page 208 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
System Time
On the System / System time page, you can manually set the time and date of the router or
configure automatic synchronization of the system time with a time server on the Internet.
Figure 164. The System / System time page.
To set the system time manually, select the Manual value from the Mode drop-down list and set
the time and date in the fields displayed. Then click the Apply button.
To enable automatic synchronization with a time server, follow the next steps:
1. Select the NTP value from the Mode drop-down list.
2. Select your time zone from the drop-down list. To set the time zone in accordance with the
settings of your operating system, click the Determine timezone button in the bottom
right corner of the page.
3. Specify the needed NTP server in the NTP servers field or leave the server specified by
default.
4. Click the Apply button.
In some cases NTP servers addresses are provided by your ISP. In this case, you need to select the
Get NTP server addresses using DHCP checkbox. Contact your ISP to clarify if this
checkbox needs to be enabled. If the Get NTP server addresses using DHCP checkbox is
selected, the NTP servers field is not available.
Page 209 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
!
When the router is powered off or rebooted, the system time is reset to the default value.
If you have set automatic synchronization for the system time, the internal clock of the
device will be configured after connecting to the Inter net. If you have set the system time
manually, you need to set the time and date again (see above).
Ping
On the System / Ping page, you can check availability of a host from the local or global network
via the Ping utility.
The Ping utility sends echo requests to a specified host and receives echo replies.
Figure 165. The System / Ping page.
To check availability of a host, enter the IP address or name of this host in the Host field, and select
a number of requests that will be sent in order to check its availability from the Count of packets
drop-down list. If availability check should be performed with IPv6, select the relevant checkbox.
Click the Start button. After a while, the results will be displayed on the page.
Page 210 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Traceroute
On the System / Traceroute page, you can determine the route of data transfer to a host via the
traceroute utility.
Figure 166. The System / Traceroute page.
To determine the route, enter the name or IP address of a host in the Host field. If the route should
be determined using IPv6, select the relevant checkbox. Click the Start button. After a while, the
results will be displayed on the page.
Page 211 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Telnet
On the System / Telnet page, you can enable or disable access to the device settings via TELNET
from your LAN. By default, access is enabled.
Figure 167. The System / Telnet page.
To disable access via TELNET, deselect the On checkbox and click the Apply button.
To enable access via TELNET again, select the On checkbox. In the Port field, enter the number of
the router's port through which access will be allowed (by default, the port 23 is specified). Then
click the Apply button.
Page 212 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
Users USB
On the System / Users USB page, you can create user accounts to provide access to data on the
USB storage connected to the router.
Figure 168. The System / Users USB page.
To create a new user account, click the Add button.
Figure 169. The page for adding a user.
Page 213 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Configuring via Web-based Interface
User Manual
On the opened page, in the Login field, specify a username, and in the Password and Password
confirmation fields – the password for the account. You can use letters of the Latin alphabet
(uppercase and/or lowercase) and digits.
!
You cannot create accounts with the following usernames: ftp, admin, support,
user, nobody.
To change the password of an account, select the relevant line in the table. On the opened page,
enter a new value in the Password and Password confirmation fields, then click the Apply
button.
To remove an account, select the checkbox located to the left of the relevant line in the table and
click the Delete button. Also you can remove an account on the editing page.
To remove all accounts from this page, click the Clear all button (the button is displayed if at least
one account exists).
Page 214 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Operation Guidelines
User Manual
CHAPTER 5.
OPERATION GUIDELINES
Safety Instructions
Place your router on a flat horizontal surface or mount the router on the wall (the mounting holes
are located on the ищеещь panel of the device). Make sure that the router is provided with
sufficient ventilation.
To prevent overheating, do not obstruct the ventilation openings of the router.
Plug the router into a surge protector to reduce the risk of damage from power surges and lightning
strikes.
Operate the router only from an electrical outlet with the correct power source as indicated on the
adapter.
Do not open the cover of the router. Otherwise any warranty will be invalidated.
Unplug the equipment before dusting and cleaning. Use a damp cloth to clean the equipment. Do
not use liquid/aerosol cleaners or magnetic/static cleaning devices.
Page 215 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Operation Guidelines
User Manual
Wireless Installation Considerations
The DIR-825/AC device lets you access your network using a wireless connection from virtually
anywhere within the operating range of your wireless network. Keep in mind, however, that the
number, thickness and location of walls, ceilings, or other objects that the wireless signals must pass
through, may limit the range. Typical ranges vary depending on the types of materials and
background RF noise in your home or office. To maximize your wireless range, follow the
guidelines below.
1. Keep the number of walls and ceilings between the DIR-825/AC device and other network
devices to a minimum – each wall or ceiling can reduce your wireless network range by 390 feet (1-30 meters).
2. Be aware of the direct line between network devices. Place your devices so that the signal
travels straight through a wall or ceiling (instead of at an angle) for better reception.
3. Building materials make a difference. A solid metal door or aluminum studs may have a
negative effect on your wireless range. Try to position your router, access points, and
computers so that the signal passes through drywalls or open doorways. Materials and
objects such as glass, steel, metal, walls with insulation, water (fish tanks), mirrors, file
cabinets, brick, and concrete will degrade your wireless signal.
4. Keep your router away (at least 3-6 feet or 1-2 meters) from electrical devices or appliances
that generate RF noise.
5. If you are using 2.4 GHz cordless phones or X-10 equipment (wireless devices such as
ceiling fans, lights, and home security systems), your wireless connection may degrade
dramatically or drop completely. Make sure your 2.4 GHz phone base is as far away from
your wireless devices as possible. Note, that the base transmits a signal even if the phone in
not in use.
Page 216 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Operation Guidelines
User Manual
Connecting to Cable or DSL Modem
If you need to connect the router to a cable or DSL modem, do the following.
1. Place the router in an open location in the supposed center of your wireless network. Do not
plug the power adapter into the router.
2. Turn off your PC.
3. Unplug the Ethernet cable (that connects your PC to your modem) from your computer and
place it into the INTERNET port of your router.
4. Plug another Ethernet cable into one of the four LAN ports on the router. Plug the other end
into the Ethernet port of your PC.
5. Turn on your modem. Wait until the modem is booted (about 30 seconds).
6. Plug the power adapter to the router and connect to an electrical outlet or power strip. Wait
until the router is booted (about 30 seconds).
7. Turn on your PC.
8. Verify the LEDs of the router. The following LEDs should be on: POWER, LAN (of the
relevant Ethernet port), and INTERNET. If not, make sure that your computer, modem, and
router are powered on and the relevant cables are connected correctly.
Page 217 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
Abbreviations and Acronyms
User Manual
CHAPTER 6.
ABBREVIATIONS AND ACRONYMS
3G
Third Generation
AC
Access Category
AES
Advanced Encryption Standard
ARP
Address Resolution Protocol
BSSID
Basic Service Set Identifier
CDMA
Code Division Multiple Access
CRC
Cyclic Redundancy Check
DDNS
Dynamic Domain Name System
DDoS
Distributed Denial of Service
DHCP
Dynamic Host Configuration Protocol
DMZ
DeMilitarized Zone
DNS
Domain Name System
DTIM
Delivery Traffic Indication Message
GMT
Greenwich Mean Time
GSM
Global System for Mobile Communications
IGD
Internet Gateway Device
IGMP
Internet Group Management Protocol
IMEI
International Mobile Equipment Identity
IMSI
International Mobile Subscriber Identity
IP
Internet Protocol
ISP
Internet Service Provider
L2TP
Layer 2 Tunneling Protocol
LAN
Local Area Network
LCP
Link Control Protocol
LTE
Long Term Evolution
MAC
Media Access Control
Page 218 of 220
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
User Manual
MTU
Maximum Transmission Unit
NAT
Network Address Translation
NTP
Network Time Protocol
OFDM
Orthogonal Frequency Division Multiplexing
PBC
Push Button Configuration
PIN
Personal Identification Number
PPPoE
Point-to-point protocol over Ethernet
PPTP
Point-to-point tunneling protocol
PSK
Pre-shared key
PUK
PIN Unlock Key
QoS
Quality of Service
R-UIM
Removable User Identity Module
RADIUS
Remote Authentication in Dial-In User Service
RIP
Routing Information Protocol
RTS
Request To Send
RTSP
Real Time Streaming Protocol
SIP
Session Initiation Protocol
SIM
Subscriber Identification Module
SMB
Server Message Block
SSID
Service Set Identifier
TKIP
Temporal Key Integrity Protocol
UDP
User Datagram Protocol
UPnP
Universal Plug and Play
URL
Uniform Resource Locator
USB
Universal Serial Bus
VLAN
Virtual Local Area Network
VPN
Virtual Private Network
WAN
Wide Area Network
Page 219 of 220
Abbreviations and Acronyms
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
User Manual
WEP
Wired Equivalent Privacy
Wi-Fi
Wireless Fidelity
WISP
Wireless Internet Service Provider
WLAN
Wireless Local Area Network
WMM
Wi-Fi Multimedia
WPA
Wi-Fi Protected Access
WPS
Wi-Fi Protected Setup
Page 220 of 220
Abbreviations and Acronyms
">